@bonnard/mcp-charts 0.1.1 → 0.1.2

package/README.md

@@ -1,38 +1,77 @@
-# @bonnard/mcp-charts
+<h1 align="center">@bonnard/mcp-charts</h1>
 
-Add agent-ready, interactive charts to your MCP server in a few lines. `addCharts` registers a
-`visualize` tool plus an embedded chart widget; your agent writes SQL, you run it, and the result
-renders as an interactive chart inside the MCP host (Claude, ChatGPT, and other MCP Apps clients).
+<p align="center">Interactive charts for your MCP server, in a few lines.</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@bonnard/mcp-charts"><img src="https://img.shields.io/npm/v/@bonnard/mcp-charts" alt="npm version"></a>
+  <a href="https://github.com/bonnard-data/mcp-charts/actions/workflows/ci.yml"><img src="https://github.com/bonnard-data/mcp-charts/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="./LICENSE"><img src="https://img.shields.io/npm/l/@bonnard/mcp-charts" alt="MIT license"></a>
+</p>
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/bonnard-data/mcp-charts/main/assets/hero-bubble.png" alt="A chart rendered inside Claude from a visualize tool call" width="820">
+</p>
+
+`@bonnard/mcp-charts` adds a `visualize` tool plus an embedded chart widget to any MCP server. The agent writes SQL, your database returns the rows, and the result renders as an interactive chart inside the host (Claude, ChatGPT, and other MCP Apps clients). You write no frontend code.
+
+> Pre-1.0: the API may change before a 1.0 release.
+
+## Install
 
 ```bash
 npm install @bonnard/mcp-charts
 ```
 
+## Quickstart
+
+Call `addCharts` on your existing MCP server and give it a read-only query callback:
+
 ```ts
 import { addCharts } from "@bonnard/mcp-charts";
+import { postgresRunSql } from "@bonnard/mcp-charts/postgres";
 
 addCharts(server, {
-  // your read-only query callback — return { rows } (and optionally typed `fields`)
-  runSql: async (sql) => ({ rows: await db.query(sql) }),
-  discovery: { toolName: "explore_schema" }, // your schema-discovery tool
+  runSql: postgresRunSql(pool), // maps pg column types to chart field kinds
+  discovery: { toolName: "explore_schema" }, // tell the agent to discover tables first
 });
 ```
 
-You own the database connection; the SDK only turns the rows into a chart. Bring your own SQL, or
-use a bundled warehouse adapter (BigQuery, Postgres, DuckDB, Snowflake, Databricks):
+That registers a `visualize` tool and a `ui://bonnard/chart` widget resource. The agent calls it with SQL; the rows render as a chart in the host, with a text fallback for non-widget clients.
+
+## Why
+
+- **Grounded in real data.** Charts render the rows your query returned, not numbers the model typed into a tool call. No hallucinated figures.
+- **A few lines, no frontend.** One function, one widget that works across every MCP Apps host. You don't maintain per-client rendering code.
+- **Interactive, not static images.** Tooltips, legends, and axis formatting, native to the client.
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/bonnard-data/mcp-charts/main/assets/interactive-waterfall.png" alt="Interactive waterfall chart with a hover tooltip, rendered in Claude" width="820">
+</p>
+
+## Chart types
+
+Eight types, chosen automatically from the shape of your data or set explicitly: `bar`, `line`, `area`, `pie`, `scatter`, `funnel`, `waterfall`, `table`. Plus bar variants (stacked, grouped, 100% stacked, horizontal), dual-axis combos, bubble sizing, and reference lines. See the [chart types reference](https://docs.bonnard.dev/mcp-charts/chart-types).
+
+## Warehouse adapters
+
+Skip writing `runSql` by hand. Each adapter wraps your driver and maps native column types to chart roles (dimension, measure, time):
 
 ```ts
 import { postgresRunSql } from "@bonnard/mcp-charts/postgres";
 addCharts(server, { runSql: postgresRunSql(pool) });
 ```
 
-## Read-only access
+Bundled for Postgres, BigQuery, Snowflake, Databricks, and DuckDB. Each driver is an optional peer dependency, installed only if you import its subpath. See [warehouse adapters](https://docs.bonnard.dev/mcp-charts/adapters).
+
+## Security
+
+`visualize` executes agent-written SQL against your database. Treat it as untrusted input: connect `runSql` to a **read-only, least-privilege** role scoped to the data you want exposed. Your database permissions are the security boundary; the SDK does not sandbox queries. See [Security](https://docs.bonnard.dev/mcp-charts/getting-started#security).
 
-The agent writes the SQL, so run it through a **read-only database role** — that is the security
-boundary. The bundled adapters also apply a lightweight SELECT-only check (`assertReadOnlySql`), but
-treat that as a guardrail, not a substitute for least-privilege credentials.
+## Links
 
-Full docs and examples: https://github.com/bonnard-data/mcp-charts
+- Docs: https://docs.bonnard.dev/mcp-charts/getting-started
+- Website: https://bonnard.dev
+- Issues: https://github.com/bonnard-data/mcp-charts/issues
 
 ## License
 

package/dist/bigquery.d.ts

@@ -1,5 +1,5 @@
 import { TableField, BigQuery } from '@google-cloud/bigquery';
-import { C as ChartData } from './types-CHiUU9mj.js';
+import { C as ChartData } from './types-6ALzXWjE.js';
 
 /** A BigQuery schema field. Anchored to the client's own `TableField` type so it tracks the driver:
  *  if @google-cloud/bigquery changes the schema shape, this and its consumers fail to compile.

package/dist/bigquery.js

@@ -1,7 +1,7 @@
 import {
   assertReadOnlySql,
   buildChartData
-} from "./chunk-NGXV4I2L.js";
+} from "./chunk-I3HINKHN.js";
 
 // src/adapters/bigquery.ts
 var NUMERIC = /* @__PURE__ */ new Set(["INT64", "INTEGER", "FLOAT64", "FLOAT", "NUMERIC", "BIGNUMERIC"]);

package/dist/{chunk-NGXV4I2L.js → chunk-I3HINKHN.js}

@@ -11,13 +11,55 @@ function sniffTimeGranularity(value) {
   }
   return null;
 }
+var DAY_MS = 864e5;
+function sniffGranularityFromValues(values) {
+  const seen = /* @__PURE__ */ new Set();
+  const dates = [];
+  for (const v of values) {
+    if (v == null) continue;
+    const g = sniffTimeGranularity(v);
+    if (g === null) return null;
+    if (g !== "day") return g;
+    const day = String(v).slice(0, 10);
+    if (seen.has(day)) continue;
+    seen.add(day);
+    const d = /* @__PURE__ */ new Date(`${day}T00:00:00.000Z`);
+    if (isNaN(d.getTime())) return null;
+    dates.push(d);
+  }
+  if (dates.length === 0) return null;
+  if (dates.length === 1) return "day";
+  const times = dates.map((d) => d.getTime()).sort((a, b) => a - b);
+  let minGap = Infinity;
+  for (let i = 1; i < times.length; i++) minGap = Math.min(minGap, times[i] - times[i - 1]);
+  const all = (p) => dates.every(p);
+  if (all((d) => d.getUTCDate() === 1)) {
+    if (all((d) => d.getUTCMonth() === 0)) return "year";
+    if (all((d) => d.getUTCMonth() % 3 === 0) && minGap > 31 * DAY_MS) return "quarter";
+    return "month";
+  }
+  if (all((d) => d.getUTCDay() === dates[0].getUTCDay())) return "week";
+  return "day";
+}
+var KIND_SAMPLE = 20;
 function sniffKind(rows, name) {
-  const sample = rows.find((r) => r[name] != null)?.[name];
-  if (sample == null) return "string";
-  if (typeof sample === "number" || typeof sample === "bigint") return "number";
-  if (typeof sample === "boolean") return "boolean";
-  if (typeof sample === "string" && sniffTimeGranularity(sample) !== null) return "time";
-  return "string";
+  const kindOf = (v) => {
+    if (typeof v === "number" || typeof v === "bigint") return "number";
+    if (typeof v === "boolean") return "boolean";
+    if (typeof v === "string" && sniffTimeGranularity(v) !== null) return "time";
+    return "string";
+  };
+  let kind;
+  let seen = 0;
+  for (const r of rows) {
+    const v = r[name];
+    if (v == null) continue;
+    const k = kindOf(v);
+    if (kind === void 0) kind = k;
+    else if (k !== kind) return "string";
+    if (++seen >= KIND_SAMPLE) break;
+  }
+  return kind ?? "string";
 }
 function roleFromKind(kind) {
   if (kind === "time") return "time";
@@ -27,9 +69,17 @@ function roleFromKind(kind) {
 function titleCase(s) {
   return s.replace(/_/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
 }
-function formatHint(name) {
+function formatHint(name, values) {
   const n = name.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase();
-  if (/(^|_)(rate|pct|percent|percentage|ratio)(_|$)/.test(n)) return "percent";
+  if (/(^|_)(pct|percent|percentage)(_|$)/.test(n)) return "percent";
+  if (/(^|_)(rate|ratio)(_|$)/.test(n)) {
+    for (const v of values ?? []) {
+      if (v == null) continue;
+      const x = Number(v);
+      if (Number.isFinite(x) && Math.abs(x) > 1) return void 0;
+    }
+    return "percent";
+  }
   return void 0;
 }
 function granularityHint(name) {
@@ -49,8 +99,8 @@ function inferFields(data) {
     const d = declared.get(name);
     const kind = d?.kind ?? sniffKind(rows, name);
     const role = d?.role ?? roleFromKind(kind);
-    const granularity = d?.granularity ?? (kind === "time" ? sniffTimeGranularity(rows.find((r) => r[name] != null)?.[name]) ?? granularityHint(name) : void 0);
-    const format = d?.format ?? (kind === "number" ? formatHint(name) : void 0);
+    const granularity = d?.granularity ?? (kind === "time" ? sniffGranularityFromValues(rows.map((r) => r[name])) ?? granularityHint(name) : void 0);
+    const format = d?.format ?? (kind === "number" ? formatHint(name, rows.map((r) => r[name])) : void 0);
     return {
       name,
       kind,
@@ -95,10 +145,16 @@ function buildChartData({
   mapKind,
   normalizeCell = defaultNormalizeCell
 }) {
+  const kindByName = new Map(columns.map((col) => [col.name, mapKind(col.type, col)]));
+  const out = rows.map((row) => {
+    const r = {};
+    for (const col of columns) r[col.name] = normalizeCell(row[col.name], kindByName.get(col.name), col);
+    return r;
+  });
   const fields = columns.map((col) => {
-    const kind = mapKind(col.type, col);
-    const format = kind === "number" ? formatHint(col.name) : void 0;
-    const granularity = kind === "time" ? granularityHint(col.name) : void 0;
+    const kind = kindByName.get(col.name);
+    const format = kind === "number" ? formatHint(col.name, out.map((r) => r[col.name])) : void 0;
+    const granularity = kind === "time" ? sniffGranularityFromValues(out.map((r) => r[col.name])) ?? granularityHint(col.name) : void 0;
     return {
       name: col.name,
       kind,
@@ -108,12 +164,6 @@ function buildChartData({
       ...granularity && { granularity }
     };
   });
-  const kindByName = new Map(fields.map((f) => [f.name, f.kind]));
-  const out = rows.map((row) => {
-    const r = {};
-    for (const col of columns) r[col.name] = normalizeCell(row[col.name], kindByName.get(col.name), col);
-    return r;
-  });
   return { rows: out, fields };
 }
 function assertReadOnlySql(sql) {
@@ -133,4 +183,4 @@ export {
   buildChartData,
   assertReadOnlySql
 };
-//# sourceMappingURL=chunk-NGXV4I2L.js.map
+//# sourceMappingURL=chunk-I3HINKHN.js.map

package/dist/chunk-I3HINKHN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resolve/infer.ts","../src/adapters/sql.ts"],"sourcesContent":["// Typing inference: turn a ChartData into a complete, role-tagged FieldMeta list.\n// Priority: declared fields win; anything missing is sniffed from the row values.\n// This is what lets resolve() decide x / y / series when the data source did not\n// supply full typing (e.g. raw SQL rows).\nimport type { ChartData, FieldFormat, FieldKind, FieldMeta, FieldRole, TimeGranularity } from \"../types.js\";\n\n// Period-string -> granularity. Lets the raw-SQL path recognize time buckets that aren't full ISO\n// dates (e.g. strftime('%Y-%m') -> \"2025-01\") so time series are typed TEMPORAL — ordered, drawn\n// vertically, nicely labelled — instead of being mistaken for high-cardinality categories. Used\n// when the data source declares no column types, so the kind is inferred from the value shape.\nexport function sniffTimeGranularity(value: unknown): TimeGranularity | null {\n  if (typeof value !== \"string\") return null;\n  if (/^\\d{4}-\\d{2}-\\d{2}([T ]|$)/.test(value)) return \"day\"; // 2025-01-15 or a full datetime\n  if (/^\\d{4}-\\d{2}$/.test(value)) return \"month\"; // 2025-01\n  if (/^\\d{4}-?Q[1-4]$/i.test(value)) return \"quarter\"; // 2025-Q1 / 2025Q1\n  if (/^\\d{4}-W\\d{2}$/i.test(value)) return \"week\"; // 2025-W03 (ISO week)\n  if (/^\\d{4}$/.test(value)) {\n    const y = Number(value); // bare year as a string (\"2025\"); guard the range to avoid 4-digit codes\n    if (y >= 1900 && y <= 2100) return \"year\";\n  }\n  return null;\n}\n\n// Granularity from the actual values. date_trunc('month'|'quarter'|'year'|'week') yields FULL\n// dates, so a single value's shape reads as \"day\" and a monthly series gets ~30x null-filled\n// into disconnected dots. Scan the distinct dates instead: all Jan 1 -> year, all first-of-\n// quarter spaced like quarters -> quarter, all first-of-month -> month, all the same weekday ->\n// week, else day. Period strings (YYYY-MM, YYYY-Qn, ...) state their own granularity; mixed or\n// unparseable values bail out (null).\nconst DAY_MS = 86_400_000;\nexport function sniffGranularityFromValues(values: unknown[]): TimeGranularity | null {\n  const seen = new Set<string>();\n  const dates: Date[] = [];\n  for (const v of values) {\n    if (v == null) continue;\n    const g = sniffTimeGranularity(v);\n    if (g === null) return null;\n    if (g !== \"day\") return g;\n    const day = String(v).slice(0, 10);\n    if (seen.has(day)) continue;\n    seen.add(day);\n    const d = new Date(`${day}T00:00:00.000Z`);\n    if (isNaN(d.getTime())) return null;\n    dates.push(d);\n  }\n  if (dates.length === 0) return null;\n  if (dates.length === 1) return \"day\"; // one distinct date: no periodicity to read\n  const times = dates.map((d) => d.getTime()).sort((a, b) => a - b);\n  let minGap = Infinity;\n  for (let i = 1; i < times.length; i++) minGap = Math.min(minGap, times[i]! - times[i - 1]!);\n  const all = (p: (d: Date) => boolean) => dates.every(p);\n  if (all((d) => d.getUTCDate() === 1)) {\n    if (all((d) => d.getUTCMonth() === 0)) return \"year\";\n    // First-of-quarter alone also matches monthly data (Jan, Feb, ...); the gap disambiguates.\n    if (all((d) => d.getUTCMonth() % 3 === 0) && minGap > 31 * DAY_MS) return \"quarter\";\n    return \"month\";\n  }\n  if (all((d) => d.getUTCDay() === dates[0]!.getUTCDay())) return \"week\";\n  return \"day\";\n}\n\n// One value can lie (a text column whose first value is \"2024\" or \"2025-01-15\" would type the\n// whole column time/number), so sample several and require consensus; disagreement -> string.\nconst KIND_SAMPLE = 20;\nexport function sniffKind(rows: Record<string, unknown>[], name: string): FieldKind {\n  const kindOf = (v: unknown): FieldKind => {\n    if (typeof v === \"number\" || typeof v === \"bigint\") return \"number\";\n    if (typeof v === \"boolean\") return \"boolean\";\n    if (typeof v === \"string\" && sniffTimeGranularity(v) !== null) return \"time\";\n    return \"string\";\n  };\n  let kind: FieldKind | undefined;\n  let seen = 0;\n  for (const r of rows) {\n    const v = r[name];\n    if (v == null) continue;\n    const k = kindOf(v);\n    if (kind === undefined) kind = k;\n    else if (k !== kind) return \"string\";\n    if (++seen >= KIND_SAMPLE) break;\n  }\n  return kind ?? \"string\";\n}\n\nexport function roleFromKind(kind: FieldKind): FieldRole {\n  if (kind === \"time\") return \"time\";\n  if (kind === \"number\") return \"measure\";\n  return \"dimension\";\n}\n\nexport function titleCase(s: string): string {\n  return s.replace(/_/g, \" \").replace(/\\b\\w/g, (c) => c.toUpperCase());\n}\n\n// Name-based hints — a purely conventional fallback used only when the data source declares no\n// format/granularity. Centralized here so the adapter path (buildChartData) and the raw-rows path\n// (inferFields) apply identical rules.\n\n// A numeric column whose name reads as a percentage renders as a percent. pct/percent/percentage\n// names are unambiguous; rate/ratio names are not (exchange_rate at 1.08, hourly_rate at 45), so\n// they only hold when no value contradicts a 0-1 fraction reading. Currency is deliberately NOT\n// guessed from names (the code is unknowable) — declare it. camelCase is normalized to snake.\nexport function formatHint(name: string, values?: unknown[]): FieldFormat | undefined {\n  const n = name.replace(/([a-z0-9])([A-Z])/g, \"$1_$2\").toLowerCase();\n  if (/(^|_)(pct|percent|percentage)(_|$)/.test(n)) return \"percent\";\n  if (/(^|_)(rate|ratio)(_|$)/.test(n)) {\n    for (const v of values ?? []) {\n      if (v == null) continue;\n      const x = Number(v);\n      if (Number.isFinite(x) && Math.abs(x) > 1) return undefined;\n    }\n    return \"percent\";\n  }\n  return undefined;\n}\n\n// Granularity from the column name, for time columns whose values don't reveal it (e.g. a DATE\n// named \"week_start\" holding full dates). Defaults to day.\nexport function granularityHint(name: string): TimeGranularity {\n  const n = name.toLowerCase();\n  if (n.includes(\"year\")) return \"year\";\n  if (n.includes(\"quarter\")) return \"quarter\";\n  if (n.includes(\"month\")) return \"month\";\n  if (n.includes(\"week\")) return \"week\";\n  return \"day\";\n}\n\n/** Complete field metadata for every column, declared values taking precedence. */\nexport function inferFields(data: ChartData): FieldMeta[] {\n  const { rows, fields } = data;\n  const declared = new Map((fields ?? []).map((f) => [f.name, f]));\n  // Union of returned columns + any declared-only names: declaring fields for SOME columns\n  // augments their typing, it does not drop the columns you didn't declare.\n  const rowKeys = rows[0] ? Object.keys(rows[0]) : [];\n  const names = [...rowKeys, ...[...declared.keys()].filter((n) => !rowKeys.includes(n))];\n\n  return names.map((name) => {\n    const d = declared.get(name);\n    const kind: FieldKind = d?.kind ?? sniffKind(rows, name);\n    const role: FieldRole = d?.role ?? roleFromKind(kind);\n    // Time columns with no declared granularity: infer it from the values (YYYY-MM -> month,\n    // all first-of-month full dates -> month). declared > value-scan > name-hint\n    const granularity =\n      d?.granularity ??\n      (kind === \"time\"\n        ? (sniffGranularityFromValues(rows.map((r) => r[name])) ?? granularityHint(name))\n        : undefined);\n    // declared > name-hint (rate -> percent); only for numeric columns\n    const format = d?.format ?? (kind === \"number\" ? formatHint(name, rows.map((r) => r[name])) : undefined);\n    return {\n      name,\n      kind,\n      role,\n      label: d?.label ?? titleCase(name),\n      ...(format && { format }),\n      ...(granularity && { granularity }),\n      ...(d?.additive != null && { additive: d.additive }),\n      ...(d?.currency && { currency: d.currency }),\n    };\n  });\n}\n","// Shared adapter core. An adapter's only engine-specific jobs are (a) report each column's engine\n// type, (b) map that type to a FieldKind, and (c) normalize a cell to a flat scalar. The rest —\n// assembling typed FieldMeta (with name-based format/granularity hints), the ChartData shape, and\n// the read-only check — lives here so every adapter shares it.\n//\n// Connection, auth, read-only enforcement, cost caps and timeouts belong to the caller's database\n// role; assertReadOnlySql is a cheap extra check on LLM-authored SQL, not a substitute for one.\nimport type { ChartData, FieldKind, FieldMeta } from \"../types.js\";\nimport { roleFromKind, titleCase, formatHint, granularityHint, sniffGranularityFromValues } from \"../resolve/infer.js\";\n\n/** A source column: its name + the engine's declared type, in whatever shape the driver reports. */\nexport interface SourceColumn {\n  name: string;\n  /** Engine type, passed verbatim to mapKind (e.g. \"INT64\", a Postgres OID, \"VARCHAR\", a field object). */\n  type: unknown;\n}\n\n/** Map an engine's column type to our FieldKind. The one piece of real per-engine work. */\nexport type KindMapper = (type: unknown, column: SourceColumn) => FieldKind;\n\n/** Coerce one cell value to a flat scalar, guided by the resolved kind. */\nexport type CellNormalizer = (value: unknown, kind: FieldKind, column: SourceColumn) => unknown;\n\nexport interface BuildChartDataOptions {\n  rows: Record<string, unknown>[];\n  columns: SourceColumn[];\n  mapKind: KindMapper;\n  /** Optional; defaults to {@link defaultNormalizeCell}, which suits drivers that return JS-native values. */\n  normalizeCell?: CellNormalizer;\n}\n\n/** Default cell normalizer: pass scalars through, coerce numbers/booleans, stringify non-scalars.\n *  Handles `{ value }` wrapper objects (some drivers wrap typed values). Adapters whose driver\n *  needs special handling (e.g. BigQuery's typed-string + wrapper mix) supply their own. */\nexport function defaultNormalizeCell(value: unknown, kind: FieldKind): unknown {\n  if (value == null) return null;\n  const obj = typeof value === \"object\" ? (value as Record<string, unknown>) : null;\n  if (kind === \"number\") {\n    const raw = obj ? (\"value\" in obj ? obj.value : (value as { toString(): string }).toString()) : value;\n    const n = Number(raw);\n    return Number.isFinite(n) ? n : null;\n  }\n  if (kind === \"boolean\") {\n    if (typeof value === \"boolean\") return value;\n    const s = String(obj && \"value\" in obj ? obj.value : value).toLowerCase();\n    return s === \"true\" || s === \"1\" ? true : s === \"false\" || s === \"0\" ? false : null;\n  }\n  if (kind === \"time\") {\n    if (obj && \"value\" in obj) return String(obj.value);\n    return value instanceof Date ? value.toISOString() : typeof value === \"string\" ? value : String(value);\n  }\n  // string-ish: unwrap { value }, stringify arrays/objects so the scalar guard passes, else pass through.\n  if (obj) {\n    if (Array.isArray(value)) return JSON.stringify(value);\n    if (\"value\" in obj) return String(obj.value);\n    return JSON.stringify(value);\n  }\n  return value;\n}\n\n/**\n * Turn a SQL result (rows + column types) into typed ChartData. Builds a complete FieldMeta per\n * column from the engine kind + name-based format/granularity hints, then normalizes every cell.\n */\nexport function buildChartData({\n  rows,\n  columns,\n  mapKind,\n  normalizeCell = defaultNormalizeCell,\n}: BuildChartDataOptions): ChartData {\n  const kindByName = new Map(columns.map((col) => [col.name, mapKind(col.type, col)]));\n  const out = rows.map((row) => {\n    const r: Record<string, unknown> = {};\n    for (const col of columns) r[col.name] = normalizeCell(row[col.name], kindByName.get(col.name)!, col);\n    return r;\n  });\n  const fields: FieldMeta[] = columns.map((col) => {\n    const kind = kindByName.get(col.name)!;\n    const format = kind === \"number\" ? formatHint(col.name, out.map((r) => r[col.name])) : undefined;\n    // Granularity from the normalized values (all first-of-month -> month); name-hint fallback.\n    const granularity =\n      kind === \"time\"\n        ? (sniffGranularityFromValues(out.map((r) => r[col.name])) ?? granularityHint(col.name))\n        : undefined;\n    return {\n      name: col.name,\n      kind,\n      role: roleFromKind(kind),\n      label: titleCase(col.name),\n      ...(format && { format }),\n      ...(granularity && { granularity }),\n    };\n  });\n  return { rows: out, fields };\n}\n\n/**\n * Reject anything that isn't a single SELECT/WITH statement. A cheap check on LLM-authored SQL;\n * enforce real read-only access with a database role.\n */\nexport function assertReadOnlySql(sql: string): void {\n  const t = sql.trim().replace(/;\\s*$/, \"\");\n  if (/;/.test(t)) throw new Error(\"Only a single statement is allowed.\");\n  if (!/^(select|with)\\b/i.test(t)) throw new Error(\"Only read-only SELECT queries are allowed.\");\n  if (\n    /\\b(insert|update|delete|merge|drop|alter|create|truncate|grant|revoke|call|export|load|copy|execute|attach|vacuum|lock)\\b/i.test(\n      t,\n    )\n  ) {\n    throw new Error(\"Write/DDL statements are not allowed.\");\n  }\n}\n"],"mappings":";AAUO,SAAS,qBAAqB,OAAwC;AAC3E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,6BAA6B,KAAK,KAAK,EAAG,QAAO;AACrD,MAAI,gBAAgB,KAAK,KAAK,EAAG,QAAO;AACxC,MAAI,mBAAmB,KAAK,KAAK,EAAG,QAAO;AAC3C,MAAI,kBAAkB,KAAK,KAAK,EAAG,QAAO;AAC1C,MAAI,UAAU,KAAK,KAAK,GAAG;AACzB,UAAM,IAAI,OAAO,KAAK;AACtB,QAAI,KAAK,QAAQ,KAAK,KAAM,QAAO;AAAA,EACrC;AACA,SAAO;AACT;AAQA,IAAM,SAAS;AACR,SAAS,2BAA2B,QAA2C;AACpF,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,QAAgB,CAAC;AACvB,aAAW,KAAK,QAAQ;AACtB,QAAI,KAAK,KAAM;AACf,UAAM,IAAI,qBAAqB,CAAC;AAChC,QAAI,MAAM,KAAM,QAAO;AACvB,QAAI,MAAM,MAAO,QAAO;AACxB,UAAM,MAAM,OAAO,CAAC,EAAE,MAAM,GAAG,EAAE;AACjC,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AACZ,UAAM,IAAI,oBAAI,KAAK,GAAG,GAAG,gBAAgB;AACzC,QAAI,MAAM,EAAE,QAAQ,CAAC,EAAG,QAAO;AAC/B,UAAM,KAAK,CAAC;AAAA,EACd;AACA,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC;AAChE,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,IAAK,UAAS,KAAK,IAAI,QAAQ,MAAM,CAAC,IAAK,MAAM,IAAI,CAAC,CAAE;AAC1F,QAAM,MAAM,CAAC,MAA4B,MAAM,MAAM,CAAC;AACtD,MAAI,IAAI,CAAC,MAAM,EAAE,WAAW,MAAM,CAAC,GAAG;AACpC,QAAI,IAAI,CAAC,MAAM,EAAE,YAAY,MAAM,CAAC,EAAG,QAAO;AAE9C,QAAI,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,KAAK,SAAS,KAAK,OAAQ,QAAO;AAC1E,WAAO;AAAA,EACT;AACA,MAAI,IAAI,CAAC,MAAM,EAAE,UAAU,MAAM,MAAM,CAAC,EAAG,UAAU,CAAC,EAAG,QAAO;AAChE,SAAO;AACT;AAIA,IAAM,cAAc;AACb,SAAS,UAAU,MAAiC,MAAyB;AAClF,QAAM,SAAS,CAAC,MAA0B;AACxC,QAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,QAAI,OAAO,MAAM,UAAW,QAAO;AACnC,QAAI,OAAO,MAAM,YAAY,qBAAqB,CAAC,MAAM,KAAM,QAAO;AACtE,WAAO;AAAA,EACT;AACA,MAAI;AACJ,MAAI,OAAO;AACX,aAAW,KAAK,MAAM;AACpB,UAAM,IAAI,EAAE,IAAI;AAChB,QAAI,KAAK,KAAM;AACf,UAAM,IAAI,OAAO,CAAC;AAClB,QAAI,SAAS,OAAW,QAAO;AAAA,aACtB,MAAM,KAAM,QAAO;AAC5B,QAAI,EAAE,QAAQ,YAAa;AAAA,EAC7B;AACA,SAAO,QAAQ;AACjB;AAEO,SAAS,aAAa,MAA4B;AACvD,MAAI,SAAS,OAAQ,QAAO;AAC5B,MAAI,SAAS,SAAU,QAAO;AAC9B,SAAO;AACT;AAEO,SAAS,UAAU,GAAmB;AAC3C,SAAO,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC;AACrE;AAUO,SAAS,WAAW,MAAc,QAA6C;AACpF,QAAM,IAAI,KAAK,QAAQ,sBAAsB,OAAO,EAAE,YAAY;AAClE,MAAI,qCAAqC,KAAK,CAAC,EAAG,QAAO;AACzD,MAAI,yBAAyB,KAAK,CAAC,GAAG;AACpC,eAAW,KAAK,UAAU,CAAC,GAAG;AAC5B,UAAI,KAAK,KAAM;AACf,YAAM,IAAI,OAAO,CAAC;AAClB,UAAI,OAAO,SAAS,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,EAAG,QAAO;AAAA,IACpD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAIO,SAAS,gBAAgB,MAA+B;AAC7D,QAAM,IAAI,KAAK,YAAY;AAC3B,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,MAAI,EAAE,SAAS,SAAS,EAAG,QAAO;AAClC,MAAI,EAAE,SAAS,OAAO,EAAG,QAAO;AAChC,MAAI,EAAE,SAAS,MAAM,EAAG,QAAO;AAC/B,SAAO;AACT;AAGO,SAAS,YAAY,MAA8B;AACxD,QAAM,EAAE,MAAM,OAAO,IAAI;AACzB,QAAM,WAAW,IAAI,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAG/D,QAAM,UAAU,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC;AAClD,QAAM,QAAQ,CAAC,GAAG,SAAS,GAAG,CAAC,GAAG,SAAS,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC,CAAC;AAEtF,SAAO,MAAM,IAAI,CAAC,SAAS;AACzB,UAAM,IAAI,SAAS,IAAI,IAAI;AAC3B,UAAM,OAAkB,GAAG,QAAQ,UAAU,MAAM,IAAI;AACvD,UAAM,OAAkB,GAAG,QAAQ,aAAa,IAAI;AAGpD,UAAM,cACJ,GAAG,gBACF,SAAS,SACL,2BAA2B,KAAK,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,gBAAgB,IAAI,IAC7E;AAEN,UAAM,SAAS,GAAG,WAAW,SAAS,WAAW,WAAW,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI;AAC9F,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,OAAO,GAAG,SAAS,UAAU,IAAI;AAAA,MACjC,GAAI,UAAU,EAAE,OAAO;AAAA,MACvB,GAAI,eAAe,EAAE,YAAY;AAAA,MACjC,GAAI,GAAG,YAAY,QAAQ,EAAE,UAAU,EAAE,SAAS;AAAA,MAClD,GAAI,GAAG,YAAY,EAAE,UAAU,EAAE,SAAS;AAAA,IAC5C;AAAA,EACF,CAAC;AACH;;;AC9HO,SAAS,qBAAqB,OAAgB,MAA0B;AAC7E,MAAI,SAAS,KAAM,QAAO;AAC1B,QAAM,MAAM,OAAO,UAAU,WAAY,QAAoC;AAC7E,MAAI,SAAS,UAAU;AACrB,UAAM,MAAM,MAAO,WAAW,MAAM,IAAI,QAAS,MAAiC,SAAS,IAAK;AAChG,UAAM,IAAI,OAAO,GAAG;AACpB,WAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAAA,EAClC;AACA,MAAI,SAAS,WAAW;AACtB,QAAI,OAAO,UAAU,UAAW,QAAO;AACvC,UAAM,IAAI,OAAO,OAAO,WAAW,MAAM,IAAI,QAAQ,KAAK,EAAE,YAAY;AACxE,WAAO,MAAM,UAAU,MAAM,MAAM,OAAO,MAAM,WAAW,MAAM,MAAM,QAAQ;AAAA,EACjF;AACA,MAAI,SAAS,QAAQ;AACnB,QAAI,OAAO,WAAW,IAAK,QAAO,OAAO,IAAI,KAAK;AAClD,WAAO,iBAAiB,OAAO,MAAM,YAAY,IAAI,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAAA,EACvG;AAEA,MAAI,KAAK;AACP,QAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,KAAK,UAAU,KAAK;AACrD,QAAI,WAAW,IAAK,QAAO,OAAO,IAAI,KAAK;AAC3C,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B;AACA,SAAO;AACT;AAMO,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAgB;AAClB,GAAqC;AACnC,QAAM,aAAa,IAAI,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;AACnF,QAAM,MAAM,KAAK,IAAI,CAAC,QAAQ;AAC5B,UAAM,IAA6B,CAAC;AACpC,eAAW,OAAO,QAAS,GAAE,IAAI,IAAI,IAAI,cAAc,IAAI,IAAI,IAAI,GAAG,WAAW,IAAI,IAAI,IAAI,GAAI,GAAG;AACpG,WAAO;AAAA,EACT,CAAC;AACD,QAAM,SAAsB,QAAQ,IAAI,CAAC,QAAQ;AAC/C,UAAM,OAAO,WAAW,IAAI,IAAI,IAAI;AACpC,UAAM,SAAS,SAAS,WAAW,WAAW,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI;AAEvF,UAAM,cACJ,SAAS,SACJ,2BAA2B,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,gBAAgB,IAAI,IAAI,IACpF;AACN,WAAO;AAAA,MACL,MAAM,IAAI;AAAA,MACV;AAAA,MACA,MAAM,aAAa,IAAI;AAAA,MACvB,OAAO,UAAU,IAAI,IAAI;AAAA,MACzB,GAAI,UAAU,EAAE,OAAO;AAAA,MACvB,GAAI,eAAe,EAAE,YAAY;AAAA,IACnC;AAAA,EACF,CAAC;AACD,SAAO,EAAE,MAAM,KAAK,OAAO;AAC7B;AAMO,SAAS,kBAAkB,KAAmB;AACnD,QAAM,IAAI,IAAI,KAAK,EAAE,QAAQ,SAAS,EAAE;AACxC,MAAI,IAAI,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACtE,MAAI,CAAC,oBAAoB,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,4CAA4C;AAC9F,MACE,6HAA6H;AAAA,IAC3H;AAAA,EACF,GACA;AACA,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AACF;","names":[]}

package/dist/databricks.d.ts

@@ -1,5 +1,5 @@
 import { DBSQLSession } from '@databricks/sql';
-import { C as ChartData } from './types-CHiUU9mj.js';
+import { C as ChartData } from './types-6ALzXWjE.js';
 
 /** A Databricks result column: name + the Thrift TTypeId code. */
 interface DatabricksColumn {

package/dist/databricks.js

@@ -1,7 +1,7 @@
 import {
   assertReadOnlySql,
   buildChartData
-} from "./chunk-NGXV4I2L.js";
+} from "./chunk-I3HINKHN.js";
 
 // src/adapters/databricks.ts
 var TTypeId = {

package/dist/duckdb.d.ts

@@ -1,5 +1,5 @@
 import { DuckDBType, DuckDBConnection } from '@duckdb/node-api';
-import { C as ChartData } from './types-CHiUU9mj.js';
+import { C as ChartData } from './types-6ALzXWjE.js';
 
 /** A DuckDB result column: its name + the DuckDBType (from reader.columnTypes()). */
 interface DuckDbColumn {

package/dist/duckdb.js

@@ -1,7 +1,7 @@
 import {
   assertReadOnlySql,
   buildChartData
-} from "./chunk-NGXV4I2L.js";
+} from "./chunk-I3HINKHN.js";
 
 // src/adapters/duckdb.ts
 import { DuckDBTypeId } from "@duckdb/node-api";

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ChartData, R as ResolveOptions, a as ChartSpec, F as FieldMeta, b as ChartContext, c as ChartType, d as FieldKind } from './types-CHiUU9mj.js';
-export { A as AxisSpec, e as ColumnSpec, E as Encode, f as FieldFormat, g as FieldRole, h as ReferenceLine, S as SeriesSpec, i as Stacking, T as TimeGranularity } from './types-CHiUU9mj.js';
+import { C as ChartData, R as ResolveOptions, a as ChartSpec, F as FieldMeta, b as ChartContext, c as ChartType, d as FieldKind } from './types-6ALzXWjE.js';
+export { A as AxisSpec, e as ColumnSpec, E as Encode, f as FieldFormat, g as FieldRole, h as ReferenceLine, S as SeriesSpec, i as Stacking, T as TimeGranularity } from './types-6ALzXWjE.js';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 
 declare function resolve(data: ChartData, opts?: ResolveOptions): ChartSpec;