@dypai-ai/mcp 1.5.16 → 1.5.17

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dypai-ai/mcp",
-  "version": "1.5.16",
+  "version": "1.5.17",
   "description": "DYPAI MCP Server — AI agent toolkit for building and deploying full-stack apps",
   "type": "module",
   "main": "src/index.js",

package/src/tools/sync/validate.js

@@ -316,6 +316,53 @@ async function readSchemaColumns(rootDir) {
 }
 
 /** Extract referenced table names from a SQL string: `FROM public.X`, `JOIN public.X`, `INTO public.X`, `UPDATE public.X`. */
+function skipSqlBalancedParens(sql, start) {
+  let depth = 0
+  for (let i = start; i < sql.length; i++) {
+    const ch = sql[i]
+    if (ch === "\"") {
+      i++
+      while (i < sql.length && sql[i] !== "\"") i++
+      continue
+    }
+    if (ch === "(") depth++
+    else if (ch === ")") {
+      depth--
+      if (depth === 0) return i + 1
+    }
+  }
+  return sql.length
+}
+
+function extractSqlCteNames(cleanSql) {
+  const names = new Set()
+  const withMatch = /^\s*WITH\s+(?:RECURSIVE\s+)?/i.exec(cleanSql)
+  if (!withMatch) return names
+  let i = withMatch[0].length
+  while (i < cleanSql.length) {
+    while (/\s|,/.test(cleanSql[i] || "")) i++
+    const nameMatch = /^"?([A-Za-z_][A-Za-z0-9_]*)"?/.exec(cleanSql.slice(i))
+    if (!nameMatch) break
+    const cteName = nameMatch[1]
+    if (SQL_KEYWORDS_AFTER_FROM.has(cteName.toUpperCase())) break
+    i += nameMatch[0].length
+    while (/\s/.test(cleanSql[i] || "")) i++
+    if (cleanSql[i] === "(") {
+      i = skipSqlBalancedParens(cleanSql, i)
+      while (/\s/.test(cleanSql[i] || "")) i++
+    }
+    if (!/^AS\b/i.test(cleanSql.slice(i))) break
+    i += 2
+    while (/\s/.test(cleanSql[i] || "")) i++
+    if (cleanSql[i] !== "(") break
+    names.add(cteName)
+    i = skipSqlBalancedParens(cleanSql, i)
+    while (/\s/.test(cleanSql[i] || "")) i++
+    if (cleanSql[i] !== ",") break
+  }
+  return names
+}
+
 function extractSqlTables(sql) {
   const tables = new Set()
   if (typeof sql !== "string" || sql.length === 0) return tables
@@ -325,6 +372,7 @@ function extractSqlTables(sql) {
     .replace(/--[^\n]*/g, " ")
     .replace(/\/\*[\s\S]*?\*\//g, " ")
     .replace(/'(?:[^']|'')*'/g, "''")
+  const cteNames = extractSqlCteNames(clean)
   // Single regex that captures BOTH a possible schema and the table name,
   // optionally preceded by `ONLY` (Postgres inheritance modifier). Splitting
   // schema/table into separate groups makes filtering by schema trivial.
@@ -339,6 +387,7 @@ function extractSqlTables(sql) {
     // when the regex was greedy enough (defensive — the optional `ONLY` above
     // already handles the common case).
     if (SQL_KEYWORDS_AFTER_FROM.has(tableName.toUpperCase())) continue
+    if (cteNames.has(tableName)) continue
     // Only validate tables in the user-managed `public` schema. System
     // schemas (auth, system, ext, pg_catalog, information_schema) are
     // managed by the engine and not present in dypai/schema.sql.