@eamonboyle/mssql-mcp 1.0.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +153 -36
- package/dist/__tests__/ExplainQueryTool.test.d.ts +2 -0
- package/dist/__tests__/ExplainQueryTool.test.d.ts.map +1 -0
- package/dist/__tests__/ExplainQueryTool.test.js +96 -0
- package/dist/__tests__/ExplainQueryTool.test.js.map +1 -0
- package/dist/__tests__/config.test.d.ts +2 -0
- package/dist/__tests__/config.test.d.ts.map +1 -0
- package/dist/__tests__/config.test.js +29 -0
- package/dist/__tests__/config.test.js.map +1 -0
- package/dist/__tests__/db.test.d.ts +2 -0
- package/dist/__tests__/db.test.d.ts.map +1 -0
- package/dist/__tests__/db.test.js +204 -0
- package/dist/__tests__/db.test.js.map +1 -0
- package/dist/__tests__/promptRegistry.test.d.ts +2 -0
- package/dist/__tests__/promptRegistry.test.d.ts.map +1 -0
- package/dist/__tests__/promptRegistry.test.js +40 -0
- package/dist/__tests__/promptRegistry.test.js.map +1 -0
- package/dist/__tests__/resourceRegistry.test.d.ts +2 -0
- package/dist/__tests__/resourceRegistry.test.d.ts.map +1 -0
- package/dist/__tests__/resourceRegistry.test.js +40 -0
- package/dist/__tests__/resourceRegistry.test.js.map +1 -0
- package/dist/__tests__/schema.test.d.ts +2 -0
- package/dist/__tests__/schema.test.d.ts.map +1 -0
- package/dist/__tests__/schema.test.js +130 -0
- package/dist/__tests__/schema.test.js.map +1 -0
- package/dist/__tests__/sql.test.d.ts +2 -0
- package/dist/__tests__/sql.test.d.ts.map +1 -0
- package/dist/__tests__/sql.test.js +35 -0
- package/dist/__tests__/sql.test.js.map +1 -0
- package/dist/__tests__/toolRegistry.test.d.ts +2 -0
- package/dist/__tests__/toolRegistry.test.d.ts.map +1 -0
- package/dist/__tests__/toolRegistry.test.js +47 -0
- package/dist/__tests__/toolRegistry.test.js.map +1 -0
- package/dist/__tests__/validation.test.d.ts +2 -0
- package/dist/__tests__/validation.test.d.ts.map +1 -0
- package/dist/__tests__/validation.test.js +111 -0
- package/dist/__tests__/validation.test.js.map +1 -0
- package/dist/__tests__/writeTools.test.d.ts +2 -0
- package/dist/__tests__/writeTools.test.d.ts.map +1 -0
- package/dist/__tests__/writeTools.test.js +115 -0
- package/dist/__tests__/writeTools.test.js.map +1 -0
- package/dist/config.d.ts +5 -0
- package/dist/config.d.ts.map +1 -0
- package/dist/config.js +34 -0
- package/dist/config.js.map +1 -0
- package/dist/db.d.ts +28 -24
- package/dist/db.d.ts.map +1 -1
- package/dist/db.js +144 -89
- package/dist/db.js.map +1 -1
- package/dist/index.d.ts +2 -2
- package/dist/index.js +70 -105
- package/dist/index.js.map +1 -1
- package/dist/promptRegistry.d.ts +16 -0
- package/dist/promptRegistry.d.ts.map +1 -0
- package/dist/promptRegistry.js +107 -0
- package/dist/promptRegistry.js.map +1 -0
- package/dist/resourceRegistry.d.ts +12 -0
- package/dist/resourceRegistry.d.ts.map +1 -0
- package/dist/resourceRegistry.js +172 -0
- package/dist/resourceRegistry.js.map +1 -0
- package/dist/schema.d.ts +41 -0
- package/dist/schema.d.ts.map +1 -0
- package/dist/schema.js +211 -0
- package/dist/schema.js.map +1 -0
- package/dist/sql.d.ts +7 -0
- package/dist/sql.d.ts.map +1 -0
- package/dist/sql.js +73 -0
- package/dist/sql.js.map +1 -0
- package/dist/toolRegistry.d.ts +16 -0
- package/dist/toolRegistry.d.ts.map +1 -0
- package/dist/toolRegistry.js +401 -0
- package/dist/toolRegistry.js.map +1 -0
- package/dist/tools/CreateIndexTool.d.ts +30 -23
- package/dist/tools/CreateIndexTool.d.ts.map +1 -1
- package/dist/tools/CreateIndexTool.js +47 -71
- package/dist/tools/CreateIndexTool.js.map +1 -1
- package/dist/tools/CreateTableTool.d.ts +18 -11
- package/dist/tools/CreateTableTool.d.ts.map +1 -1
- package/dist/tools/CreateTableTool.js +37 -56
- package/dist/tools/CreateTableTool.js.map +1 -1
- package/dist/tools/DeleteDataTool.d.ts +22 -0
- package/dist/tools/DeleteDataTool.d.ts.map +1 -0
- package/dist/tools/DeleteDataTool.js +35 -0
- package/dist/tools/DeleteDataTool.js.map +1 -0
- package/dist/tools/DescribeObjectTool.d.ts +21 -0
- package/dist/tools/DescribeObjectTool.d.ts.map +1 -0
- package/dist/tools/DescribeObjectTool.js +31 -0
- package/dist/tools/DescribeObjectTool.js.map +1 -0
- package/dist/tools/DescribeTableTool.d.ts +19 -20
- package/dist/tools/DescribeTableTool.d.ts.map +1 -1
- package/dist/tools/DescribeTableTool.js +23 -41
- package/dist/tools/DescribeTableTool.js.map +1 -1
- package/dist/tools/DropTableTool.d.ts +13 -11
- package/dist/tools/DropTableTool.d.ts.map +1 -1
- package/dist/tools/DropTableTool.js +30 -44
- package/dist/tools/DropTableTool.js.map +1 -1
- package/dist/tools/ExplainQueryTool.d.ts +32 -0
- package/dist/tools/ExplainQueryTool.d.ts.map +1 -0
- package/dist/tools/ExplainQueryTool.js +102 -0
- package/dist/tools/ExplainQueryTool.js.map +1 -0
- package/dist/tools/InsertDataTool.d.ts +20 -16
- package/dist/tools/InsertDataTool.d.ts.map +1 -1
- package/dist/tools/InsertDataTool.js +91 -108
- package/dist/tools/InsertDataTool.js.map +1 -1
- package/dist/tools/ListObjectsTool.d.ts +20 -0
- package/dist/tools/ListObjectsTool.d.ts.map +1 -0
- package/dist/tools/ListObjectsTool.js +26 -0
- package/dist/tools/ListObjectsTool.js.map +1 -0
- package/dist/tools/ListTableTool.d.ts +20 -16
- package/dist/tools/ListTableTool.d.ts.map +1 -1
- package/dist/tools/ListTableTool.js +32 -49
- package/dist/tools/ListTableTool.js.map +1 -1
- package/dist/tools/ReadDataTool.d.ts +35 -41
- package/dist/tools/ReadDataTool.d.ts.map +1 -1
- package/dist/tools/ReadDataTool.js +92 -228
- package/dist/tools/ReadDataTool.js.map +1 -1
- package/dist/tools/SearchDataTool.d.ts +27 -0
- package/dist/tools/SearchDataTool.d.ts.map +1 -0
- package/dist/tools/SearchDataTool.js +61 -0
- package/dist/tools/SearchDataTool.js.map +1 -0
- package/dist/tools/UpdateDataTool.d.ts +21 -16
- package/dist/tools/UpdateDataTool.d.ts.map +1 -1
- package/dist/tools/UpdateDataTool.js +45 -65
- package/dist/tools/UpdateDataTool.js.map +1 -1
- package/dist/validation.d.ts +14 -0
- package/dist/validation.d.ts.map +1 -0
- package/dist/validation.js +134 -0
- package/dist/validation.js.map +1 -0
- package/dist/writeSafety.d.ts +21 -0
- package/dist/writeSafety.d.ts.map +1 -0
- package/dist/writeSafety.js +169 -0
- package/dist/writeSafety.js.map +1 -0
- package/package.json +17 -6
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"db.test.js","sourceRoot":"","sources":["../../src/__tests__/db.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,WAAW,EAAE,EAAkC;IAC/C,aAAa,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;IACvC,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;IACrB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;CACtB,CAAC,CAAC,CAAC;AAEJ,4EAA4E;AAC5E,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;IACpB,MAAM,kBAAkB;QAGtB,YAA6B,MAA6B;YAA7B,WAAM,GAAN,MAAM,CAAuB;YAF1D,cAAS,GAAG,KAAK,CAAC;YAGhB,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,OAAO;YACL,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,OAAO,cAAc,CAAC,aAAa,CAAC;QACtC,CAAC;KACF;IAED,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEnF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,cAAc,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QACxC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC;QACnC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC;QAC/B,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,8BAA8B,CAAC;QACvD,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC;YACpC,QAAQ;YACR,WAAW;YACX,aAAa;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,sCAAsC,CAAC;QAC/D,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC;YACpC,QAAQ;YACR,WAAW;YACX,aAAa;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,oBAAoB,CAAC;QAC7C,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC;QACtC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,cAAc,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QACxC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC;QACxC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC;QACrC,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC;QACtC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC;QACnC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,QAAQ,CAAC;QACjC,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,cAAc,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QACxC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACtC,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QAErC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACvB,uKAAuK,CACxK,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACvB,sIAAsI,CACvI,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,yBAAyB,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QAErC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,cAAc,CAC/C,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CACvD,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACtD,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CACvD,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACtD,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,kBAAkB,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QAErC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,cAAc,CAC/C,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACtD,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAChD,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACtD,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"promptRegistry.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/promptRegistry.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
import { describe, expect, it } from "vitest";
|
|
2
|
+
import { registerPrompts } from "../promptRegistry.js";
|
|
3
|
+
describe("promptRegistry", () => {
|
|
4
|
+
it("registers prompt callbacks without a fallback branch", () => {
|
|
5
|
+
const callbacks = new Map();
|
|
6
|
+
const server = {
|
|
7
|
+
registerPrompt(name, _meta, callback) {
|
|
8
|
+
callbacks.set(name, callback);
|
|
9
|
+
},
|
|
10
|
+
};
|
|
11
|
+
registerPrompts(server, { isReadOnly: false });
|
|
12
|
+
const callback = callbacks.get("review_write_operation");
|
|
13
|
+
expect(callback).toBeDefined();
|
|
14
|
+
expect(callback?.({
|
|
15
|
+
operation: "delete inactive users",
|
|
16
|
+
databaseName: "AppDb",
|
|
17
|
+
})).toMatchObject({
|
|
18
|
+
description: "Review a proposed change and identify safety checks before running it.",
|
|
19
|
+
});
|
|
20
|
+
});
|
|
21
|
+
it("review_write_operation tells the assistant not to bypass when read-only", () => {
|
|
22
|
+
const callbacks = new Map();
|
|
23
|
+
const server = {
|
|
24
|
+
registerPrompt(name, _meta, callback) {
|
|
25
|
+
callbacks.set(name, callback);
|
|
26
|
+
},
|
|
27
|
+
};
|
|
28
|
+
registerPrompts(server, { isReadOnly: true });
|
|
29
|
+
const callback = callbacks.get("review_write_operation");
|
|
30
|
+
const result = callback({
|
|
31
|
+
operation: "DELETE FROM dbo.Users WHERE id = 1",
|
|
32
|
+
databaseName: "AppDb",
|
|
33
|
+
});
|
|
34
|
+
const text = result.messages[0].content.text;
|
|
35
|
+
expect(text).toContain("read-only");
|
|
36
|
+
expect(text).toMatch(/sqlcmd|SSMS/i);
|
|
37
|
+
expect(text).toMatch(/STOP|Do not execute/i);
|
|
38
|
+
});
|
|
39
|
+
});
|
|
40
|
+
//# sourceMappingURL=promptRegistry.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"promptRegistry.test.js","sourceRoot":"","sources":["../../src/__tests__/promptRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqD,CAAC;QAC/E,MAAM,MAAM,GAAG;YACb,cAAc,CACZ,IAAY,EACZ,KAAc,EACd,QAAmD;gBAEnD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAChC,CAAC;SACF,CAAC;QAEF,eAAe,CAAC,MAAe,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,CACJ,QAAQ,EAAE,CAAC;YACT,SAAS,EAAE,uBAAuB;YAClC,YAAY,EAAE,OAAO;SACtB,CAAC,CACH,CAAC,aAAa,CAAC;YACd,WAAW,EACT,wEAAwE;SAC3E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqD,CAAC;QAC/E,MAAM,MAAM,GAAG;YACb,cAAc,CACZ,IAAY,EACZ,KAAc,EACd,QAAmD;gBAEnD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAChC,CAAC;SACF,CAAC;QAEF,eAAe,CAAC,MAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,SAAS,EAAE,oCAAoC;YAC/C,YAAY,EAAE,OAAO;SACtB,CAAkD,CAAC;QAEpD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resourceRegistry.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/resourceRegistry.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,40 @@
|
|
|
1
|
+
import { describe, expect, it, vi } from "vitest";
|
|
2
|
+
const resourceRegistryMockState = vi.hoisted(() => ({
|
|
3
|
+
listDatabaseTables: vi.fn(async () => [
|
|
4
|
+
{ schemaName: "dbo", tableName: "Users" },
|
|
5
|
+
]),
|
|
6
|
+
listDatabaseObjects: vi.fn(async () => []),
|
|
7
|
+
}));
|
|
8
|
+
vi.mock("../schema.js", () => ({
|
|
9
|
+
describeDatabaseObject: vi.fn(),
|
|
10
|
+
describeTableSchema: vi.fn(),
|
|
11
|
+
listDatabaseObjects: resourceRegistryMockState.listDatabaseObjects,
|
|
12
|
+
listDatabaseTables: resourceRegistryMockState.listDatabaseTables,
|
|
13
|
+
}));
|
|
14
|
+
import { registerResources } from "../resourceRegistry.js";
|
|
15
|
+
describe("resourceRegistry", () => {
|
|
16
|
+
it("caches database listing reads for a short TTL", async () => {
|
|
17
|
+
const handlers = new Map();
|
|
18
|
+
const server = {
|
|
19
|
+
registerResource(name, _resource, _meta, handler) {
|
|
20
|
+
handlers.set(name, handler);
|
|
21
|
+
},
|
|
22
|
+
};
|
|
23
|
+
registerResources(server, {
|
|
24
|
+
serverName: "mssql-mcp-server",
|
|
25
|
+
serverVersion: "1.2.0",
|
|
26
|
+
isReadOnly: false,
|
|
27
|
+
allowedDatabases: ["AppDb"],
|
|
28
|
+
toolNames: [],
|
|
29
|
+
maxRows: 100,
|
|
30
|
+
queryTimeoutMs: 30000,
|
|
31
|
+
});
|
|
32
|
+
const readTables = handlers.get("AppDb_tables");
|
|
33
|
+
expect(readTables).toBeDefined();
|
|
34
|
+
await readTables?.(new URL("mssql://database/AppDb/tables"));
|
|
35
|
+
await readTables?.(new URL("mssql://database/AppDb/tables"));
|
|
36
|
+
expect(resourceRegistryMockState.listDatabaseTables).toHaveBeenCalledTimes(1);
|
|
37
|
+
expect(resourceRegistryMockState.listDatabaseObjects).not.toHaveBeenCalled();
|
|
38
|
+
});
|
|
39
|
+
});
|
|
40
|
+
//# sourceMappingURL=resourceRegistry.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"resourceRegistry.test.js","sourceRoot":"","sources":["../../src/__tests__/resourceRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,MAAM,yBAAyB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE;KAC1C,CAAC;IACF,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC/B,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC5B,mBAAmB,EAAE,yBAAyB,CAAC,mBAAmB;IAClE,kBAAkB,EAAE,yBAAyB,CAAC,kBAAkB;CACjE,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0C,CAAC;QACnE,MAAM,MAAM,GAAG;YACb,gBAAgB,CACd,IAAY,EACZ,SAAkB,EAClB,KAAc,EACd,OAAuC;gBAEvC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC;SACF,CAAC;QAEF,iBAAiB,CAAC,MAAe,EAAE;YACjC,UAAU,EAAE,kBAAkB;YAC9B,aAAa,EAAE,OAAO;YACtB,UAAU,EAAE,KAAK;YACjB,gBAAgB,EAAE,CAAC,OAAO,CAAC;YAC3B,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,GAAG;YACZ,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAEjC,MAAM,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAE7D,MAAM,CAAC,yBAAyB,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,CACxE,CAAC,CACF,CAAC;QACF,MAAM,CACJ,yBAAyB,CAAC,mBAAmB,CAC9C,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/schema.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,130 @@
|
|
|
1
|
+
import { beforeEach, describe, expect, it, vi } from "vitest";
|
|
2
|
+
const schemaMockState = vi.hoisted(() => ({
|
|
3
|
+
getSqlRequestCalls: 0,
|
|
4
|
+
inputCalls: [],
|
|
5
|
+
queryCalls: [],
|
|
6
|
+
queryResults: [],
|
|
7
|
+
}));
|
|
8
|
+
vi.mock("mssql", () => ({
|
|
9
|
+
default: {
|
|
10
|
+
NVarChar: "NVarChar",
|
|
11
|
+
Int: "Int",
|
|
12
|
+
},
|
|
13
|
+
}));
|
|
14
|
+
vi.mock("../db.js", () => ({
|
|
15
|
+
getSqlRequest: vi.fn(async () => {
|
|
16
|
+
schemaMockState.getSqlRequestCalls += 1;
|
|
17
|
+
return {
|
|
18
|
+
request: {
|
|
19
|
+
input(name, type, value) {
|
|
20
|
+
schemaMockState.inputCalls.push({ name, type, value });
|
|
21
|
+
},
|
|
22
|
+
async query(query) {
|
|
23
|
+
schemaMockState.queryCalls.push(query);
|
|
24
|
+
return (schemaMockState.queryResults.shift() ?? {
|
|
25
|
+
recordset: [],
|
|
26
|
+
recordsets: [],
|
|
27
|
+
});
|
|
28
|
+
},
|
|
29
|
+
},
|
|
30
|
+
};
|
|
31
|
+
}),
|
|
32
|
+
}));
|
|
33
|
+
import { describeDatabaseObject } from "../schema.js";
|
|
34
|
+
describe("describeDatabaseObject", () => {
|
|
35
|
+
beforeEach(() => {
|
|
36
|
+
schemaMockState.getSqlRequestCalls = 0;
|
|
37
|
+
schemaMockState.inputCalls.length = 0;
|
|
38
|
+
schemaMockState.queryCalls.length = 0;
|
|
39
|
+
schemaMockState.queryResults.length = 0;
|
|
40
|
+
});
|
|
41
|
+
it("throws an ambiguity error when multiple schema matches exist", async () => {
|
|
42
|
+
schemaMockState.queryResults.push({
|
|
43
|
+
recordset: [
|
|
44
|
+
{
|
|
45
|
+
objectId: 1,
|
|
46
|
+
name: "Users",
|
|
47
|
+
schemaName: "dbo",
|
|
48
|
+
typeCode: "U",
|
|
49
|
+
typeDescription: "USER_TABLE",
|
|
50
|
+
createdAt: new Date(),
|
|
51
|
+
modifiedAt: new Date(),
|
|
52
|
+
definition: null,
|
|
53
|
+
},
|
|
54
|
+
{
|
|
55
|
+
objectId: 2,
|
|
56
|
+
name: "Users",
|
|
57
|
+
schemaName: "audit",
|
|
58
|
+
typeCode: "V",
|
|
59
|
+
typeDescription: "VIEW",
|
|
60
|
+
createdAt: new Date(),
|
|
61
|
+
modifiedAt: new Date(),
|
|
62
|
+
definition: null,
|
|
63
|
+
},
|
|
64
|
+
],
|
|
65
|
+
});
|
|
66
|
+
await expect(describeDatabaseObject("Users", "AppDb")).rejects.toThrow("Specify schemaName or objectTypes to disambiguate");
|
|
67
|
+
expect(schemaMockState.getSqlRequestCalls).toBe(1);
|
|
68
|
+
});
|
|
69
|
+
it("reuses a single request flow and batches detail queries", async () => {
|
|
70
|
+
schemaMockState.queryResults.push({
|
|
71
|
+
recordset: [
|
|
72
|
+
{
|
|
73
|
+
objectId: 7,
|
|
74
|
+
name: "Users",
|
|
75
|
+
schemaName: "dbo",
|
|
76
|
+
typeCode: "U",
|
|
77
|
+
typeDescription: "USER_TABLE",
|
|
78
|
+
createdAt: new Date("2024-01-01"),
|
|
79
|
+
modifiedAt: new Date("2024-01-02"),
|
|
80
|
+
definition: null,
|
|
81
|
+
},
|
|
82
|
+
],
|
|
83
|
+
}, {
|
|
84
|
+
recordsets: [
|
|
85
|
+
[
|
|
86
|
+
{
|
|
87
|
+
name: "id",
|
|
88
|
+
dataType: "int",
|
|
89
|
+
maxLength: 4,
|
|
90
|
+
precision: 10,
|
|
91
|
+
scale: 0,
|
|
92
|
+
isNullable: false,
|
|
93
|
+
isIdentity: true,
|
|
94
|
+
defaultValue: null,
|
|
95
|
+
},
|
|
96
|
+
],
|
|
97
|
+
[
|
|
98
|
+
{
|
|
99
|
+
name: "PK_Users",
|
|
100
|
+
type: "CLUSTERED",
|
|
101
|
+
isUnique: true,
|
|
102
|
+
columnName: "id",
|
|
103
|
+
keyOrdinal: 1,
|
|
104
|
+
},
|
|
105
|
+
],
|
|
106
|
+
],
|
|
107
|
+
});
|
|
108
|
+
const result = await describeDatabaseObject("Users", "AppDb", "dbo");
|
|
109
|
+
expect(result).toMatchObject({
|
|
110
|
+
name: "Users",
|
|
111
|
+
schemaName: "dbo",
|
|
112
|
+
objectType: "table",
|
|
113
|
+
columns: [
|
|
114
|
+
{
|
|
115
|
+
name: "id",
|
|
116
|
+
dataType: "int",
|
|
117
|
+
},
|
|
118
|
+
],
|
|
119
|
+
indexes: [
|
|
120
|
+
{
|
|
121
|
+
name: "PK_Users",
|
|
122
|
+
columns: ["id"],
|
|
123
|
+
},
|
|
124
|
+
],
|
|
125
|
+
});
|
|
126
|
+
expect(schemaMockState.getSqlRequestCalls).toBe(1);
|
|
127
|
+
expect(schemaMockState.queryCalls).toHaveLength(2);
|
|
128
|
+
});
|
|
129
|
+
});
|
|
130
|
+
//# sourceMappingURL=schema.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"schema.test.js","sourceRoot":"","sources":["../../src/__tests__/schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,kBAAkB,EAAE,CAAC;IACrB,UAAU,EAAE,EAA4D;IACxE,UAAU,EAAE,EAAc;IAC1B,YAAY,EAAE,EAGZ;CACH,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE;QACP,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,KAAK;KACX;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QAC9B,eAAe,CAAC,kBAAkB,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,OAAO,EAAE;gBACP,KAAK,CAAC,IAAY,EAAE,IAAa,EAAE,KAAc;oBAC/C,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzD,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,KAAa;oBACvB,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACvC,OAAO,CACL,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI;wBACtC,SAAS,EAAE,EAAE;wBACb,UAAU,EAAE,EAAE;qBACf,CACF,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,eAAe,CAAC,kBAAkB,GAAG,CAAC,CAAC;QACvC,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC;YAChC,SAAS,EAAE;gBACT;oBACE,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK;oBACjB,QAAQ,EAAE,GAAG;oBACb,eAAe,EAAE,YAAY;oBAC7B,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,UAAU,EAAE,IAAI;iBACjB;gBACD;oBACE,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,GAAG;oBACb,eAAe,EAAE,MAAM;oBACvB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,UAAU,EAAE,IAAI;iBACjB;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,mDAAmD,CACpD,CAAC;QACF,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,eAAe,CAAC,YAAY,CAAC,IAAI,CAC/B;YACE,SAAS,EAAE;gBACT;oBACE,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK;oBACjB,QAAQ,EAAE,GAAG;oBACb,eAAe,EAAE,YAAY;oBAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;oBACjC,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;oBAClC,UAAU,EAAE,IAAI;iBACjB;aACF;SACF,EACD;YACE,UAAU,EAAE;gBACV;oBACE;wBACE,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,CAAC;wBACZ,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE,CAAC;wBACR,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,IAAI;wBAChB,YAAY,EAAE,IAAI;qBACnB;iBACF;gBACD;oBACE;wBACE,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,WAAW;wBACjB,QAAQ,EAAE,IAAI;wBACd,UAAU,EAAE,IAAI;wBAChB,UAAU,EAAE,CAAC;qBACd;iBACF;aACF;SACF,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,KAAK;iBAChB;aACF;YACD,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,CAAC,IAAI,CAAC;iBAChB;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sql.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/sql.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
import { describe, expect, it } from "vitest";
|
|
2
|
+
import { buildQualifiedName, getFriendlyObjectType, getObjectTypeCodes, quoteIdentifier, } from "../sql.js";
|
|
3
|
+
describe("sql helpers", () => {
|
|
4
|
+
it("quotes safe identifiers", () => {
|
|
5
|
+
expect(quoteIdentifier("Users")).toBe("[Users]");
|
|
6
|
+
expect(buildQualifiedName("Users", "dbo")).toBe("[dbo].[Users]");
|
|
7
|
+
expect(quoteIdentifier("Order Details")).toBe("[Order Details]");
|
|
8
|
+
expect(quoteIdentifier("Users]Archive")).toBe("[Users]]Archive]");
|
|
9
|
+
});
|
|
10
|
+
it("rejects empty or control-character identifiers", () => {
|
|
11
|
+
expect(() => quoteIdentifier("")).toThrow("Invalid identifier.");
|
|
12
|
+
expect(() => buildQualifiedName("", "dbo")).toThrow("Invalid object name.");
|
|
13
|
+
expect(() => buildQualifiedName("Users", "dbo\u0000")).toThrow("Invalid schema name.");
|
|
14
|
+
expect(() => quoteIdentifier("Users\u0000Archive")).toThrow("Invalid identifier.");
|
|
15
|
+
});
|
|
16
|
+
it("maps friendly object types", () => {
|
|
17
|
+
expect(getFriendlyObjectType("U")).toBe("table");
|
|
18
|
+
expect(getFriendlyObjectType("V")).toBe("view");
|
|
19
|
+
expect(getFriendlyObjectType("P")).toBe("procedure");
|
|
20
|
+
expect(getFriendlyObjectType("FN")).toBe("function");
|
|
21
|
+
expect(getFriendlyObjectType("TR")).toBe("trigger");
|
|
22
|
+
});
|
|
23
|
+
it("resolves object type filters", () => {
|
|
24
|
+
expect(getObjectTypeCodes(["table", "view"])).toEqual(["U", "V"]);
|
|
25
|
+
expect(getObjectTypeCodes(["function"])).toEqual([
|
|
26
|
+
"FN",
|
|
27
|
+
"IF",
|
|
28
|
+
"TF",
|
|
29
|
+
"FS",
|
|
30
|
+
"FT",
|
|
31
|
+
]);
|
|
32
|
+
expect(() => getObjectTypeCodes(["queue"])).toThrow("Unsupported object type 'queue'. Expected one of: table, view, procedure, function, trigger.");
|
|
33
|
+
});
|
|
34
|
+
});
|
|
35
|
+
//# sourceMappingURL=sql.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sql.test.js","sourceRoot":"","sources":["../../src/__tests__/sql.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAC5D,sBAAsB,CACvB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CACzD,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;SACL,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CACjD,8FAA8F,CAC/F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"toolRegistry.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/toolRegistry.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
import { describe, expect, it } from "vitest";
|
|
2
|
+
import { toolDefinitions } from "../toolRegistry.js";
|
|
3
|
+
function getToolSchema(name) {
|
|
4
|
+
const definition = toolDefinitions.find((tool) => tool.tool.name === name);
|
|
5
|
+
if (!definition) {
|
|
6
|
+
throw new Error(`Missing tool definition for ${name}`);
|
|
7
|
+
}
|
|
8
|
+
return definition.inputSchema;
|
|
9
|
+
}
|
|
10
|
+
describe("toolRegistry write schemas", () => {
|
|
11
|
+
it("requires structured filters for update_data", () => {
|
|
12
|
+
const schema = getToolSchema("update_data");
|
|
13
|
+
expect(schema.safeParse({
|
|
14
|
+
tableName: "Users",
|
|
15
|
+
updates: { status: "active" },
|
|
16
|
+
whereClause: "id = 1",
|
|
17
|
+
}).success).toBe(false);
|
|
18
|
+
expect(schema.safeParse({
|
|
19
|
+
tableName: "Users",
|
|
20
|
+
updates: { status: "active" },
|
|
21
|
+
filters: [{ column: "id", operator: "=", value: 1 }],
|
|
22
|
+
}).success).toBe(true);
|
|
23
|
+
});
|
|
24
|
+
it("rejects unknown keys for delete_data", () => {
|
|
25
|
+
const schema = getToolSchema("delete_data");
|
|
26
|
+
expect(schema.safeParse({
|
|
27
|
+
tableName: "Users",
|
|
28
|
+
filters: [{ column: "id", operator: "=", value: 1 }],
|
|
29
|
+
extra: true,
|
|
30
|
+
}).success).toBe(false);
|
|
31
|
+
});
|
|
32
|
+
it("rejects extra column properties for create_table", () => {
|
|
33
|
+
const schema = getToolSchema("create_table");
|
|
34
|
+
expect(schema.safeParse({
|
|
35
|
+
tableName: "Users",
|
|
36
|
+
columns: [
|
|
37
|
+
{
|
|
38
|
+
name: "id",
|
|
39
|
+
type: "INT",
|
|
40
|
+
nullable: false,
|
|
41
|
+
unexpected: "value",
|
|
42
|
+
},
|
|
43
|
+
],
|
|
44
|
+
}).success).toBe(false);
|
|
45
|
+
});
|
|
46
|
+
});
|
|
47
|
+
//# sourceMappingURL=toolRegistry.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"toolRegistry.test.js","sourceRoot":"","sources":["../../src/__tests__/toolRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC,WAAW,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;QAE5C,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC7B,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEd,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;QAE5C,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACpD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;QAE7C,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,OAAO;iBACpB;aACF;SACF,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"validation.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/validation.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,111 @@
|
|
|
1
|
+
import { describe, it, expect } from "vitest";
|
|
2
|
+
import { validateReadQuery } from "../validation.js";
|
|
3
|
+
describe("validateReadQuery", () => {
|
|
4
|
+
it("accepts simple SELECT query", () => {
|
|
5
|
+
expect(validateReadQuery("SELECT * FROM movies")).toEqual({
|
|
6
|
+
isValid: true,
|
|
7
|
+
});
|
|
8
|
+
expect(validateReadQuery("SELECT id, name FROM users WHERE id = 1")).toEqual({
|
|
9
|
+
isValid: true,
|
|
10
|
+
});
|
|
11
|
+
});
|
|
12
|
+
it("rejects empty or non-string input", () => {
|
|
13
|
+
expect(validateReadQuery("")).toEqual({
|
|
14
|
+
isValid: false,
|
|
15
|
+
error: "Query must be a non-empty string",
|
|
16
|
+
});
|
|
17
|
+
expect(validateReadQuery(" ")).toEqual({
|
|
18
|
+
isValid: false,
|
|
19
|
+
error: "Query cannot be empty after removing comments",
|
|
20
|
+
});
|
|
21
|
+
expect(validateReadQuery(null)).toEqual({
|
|
22
|
+
isValid: false,
|
|
23
|
+
error: "Query must be a non-empty string",
|
|
24
|
+
});
|
|
25
|
+
});
|
|
26
|
+
it("rejects query that does not start with SELECT", () => {
|
|
27
|
+
expect(validateReadQuery("DELETE FROM users")).toEqual({
|
|
28
|
+
isValid: false,
|
|
29
|
+
error: "Query must start with SELECT for security reasons",
|
|
30
|
+
});
|
|
31
|
+
expect(validateReadQuery(" UPDATE users SET x = 1")).toEqual({
|
|
32
|
+
isValid: false,
|
|
33
|
+
error: "Query must start with SELECT for security reasons",
|
|
34
|
+
});
|
|
35
|
+
});
|
|
36
|
+
it("rejects dangerous keywords", () => {
|
|
37
|
+
expect(validateReadQuery("SELECT * FROM users; DELETE FROM logs")).toEqual({
|
|
38
|
+
isValid: false,
|
|
39
|
+
error: expect.stringContaining("Dangerous keyword"),
|
|
40
|
+
});
|
|
41
|
+
expect(validateReadQuery("SELECT * INTO backup FROM users")).toEqual({
|
|
42
|
+
isValid: false,
|
|
43
|
+
error: expect.stringContaining("Dangerous keyword"),
|
|
44
|
+
});
|
|
45
|
+
expect(validateReadQuery("SELECT * FROM users; DROP TABLE users")).toEqual({
|
|
46
|
+
isValid: false,
|
|
47
|
+
error: expect.stringContaining("Dangerous keyword"),
|
|
48
|
+
});
|
|
49
|
+
});
|
|
50
|
+
it("rejects SELECT INTO pattern", () => {
|
|
51
|
+
const result = validateReadQuery("SELECT * INTO newtable FROM users");
|
|
52
|
+
expect(result.isValid).toBe(false);
|
|
53
|
+
expect(result.error).toBeDefined();
|
|
54
|
+
});
|
|
55
|
+
it("rejects multiple statements", () => {
|
|
56
|
+
const result = validateReadQuery("SELECT 1; SELECT 2");
|
|
57
|
+
expect(result.isValid).toBe(false);
|
|
58
|
+
expect(result.error).toBeDefined();
|
|
59
|
+
});
|
|
60
|
+
it("rejects character conversion functions", () => {
|
|
61
|
+
expect(validateReadQuery("SELECT CHAR(65) FROM users")).toEqual({
|
|
62
|
+
isValid: false,
|
|
63
|
+
error: "Character conversion functions are not allowed as they may be used for obfuscation.",
|
|
64
|
+
});
|
|
65
|
+
expect(validateReadQuery("SELECT NCHAR(65) FROM users")).toEqual({
|
|
66
|
+
isValid: false,
|
|
67
|
+
error: "Character conversion functions are not allowed as they may be used for obfuscation.",
|
|
68
|
+
});
|
|
69
|
+
expect(validateReadQuery("SELECT ASCII('A') FROM users")).toEqual({
|
|
70
|
+
isValid: false,
|
|
71
|
+
error: "Character conversion functions are not allowed as they may be used for obfuscation.",
|
|
72
|
+
});
|
|
73
|
+
});
|
|
74
|
+
it("rejects query exceeding length limit", () => {
|
|
75
|
+
const longQuery = "SELECT * FROM users WHERE " + "x = 1 AND ".repeat(2000);
|
|
76
|
+
expect(longQuery.length).toBeGreaterThan(10000);
|
|
77
|
+
expect(validateReadQuery(longQuery)).toEqual({
|
|
78
|
+
isValid: false,
|
|
79
|
+
error: "Query is too long. Maximum allowed length is 10,000 characters.",
|
|
80
|
+
});
|
|
81
|
+
});
|
|
82
|
+
it("rejects stored procedure patterns", () => {
|
|
83
|
+
expect(validateReadQuery("SELECT * FROM sp_help")).toEqual({
|
|
84
|
+
isValid: false,
|
|
85
|
+
error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
|
|
86
|
+
});
|
|
87
|
+
expect(validateReadQuery("SELECT * FROM xp_cmdshell")).toEqual({
|
|
88
|
+
isValid: false,
|
|
89
|
+
error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
|
|
90
|
+
});
|
|
91
|
+
});
|
|
92
|
+
it("rejects WAITFOR delay/time patterns", () => {
|
|
93
|
+
const result = validateReadQuery("SELECT 1; WAITFOR DELAY '0:0:5'");
|
|
94
|
+
expect(result.isValid).toBe(false);
|
|
95
|
+
expect(result.error).toBeDefined();
|
|
96
|
+
});
|
|
97
|
+
it("rejects query that is only comments", () => {
|
|
98
|
+
expect(validateReadQuery("-- comment only")).toEqual({
|
|
99
|
+
isValid: false,
|
|
100
|
+
error: "Query cannot be empty after removing comments",
|
|
101
|
+
});
|
|
102
|
+
expect(validateReadQuery("/* block comment */")).toEqual({
|
|
103
|
+
isValid: false,
|
|
104
|
+
error: "Query cannot be empty after removing comments",
|
|
105
|
+
});
|
|
106
|
+
});
|
|
107
|
+
it("accepts SELECT with WHERE and JOIN", () => {
|
|
108
|
+
expect(validateReadQuery("SELECT u.id, u.name FROM users u JOIN orders o ON u.id = o.user_id WHERE u.active = 1")).toEqual({ isValid: true });
|
|
109
|
+
});
|
|
110
|
+
});
|
|
111
|
+
//# sourceMappingURL=validation.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../src/__tests__/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CACJ,iBAAiB,CAAC,yCAAyC,CAAC,CAC7D,CAAC,OAAO,CAAC;YACR,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,IAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3D,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,mCAAmC,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,4BAA4B,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iEAAiE;SACzE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YACnD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CACJ,iBAAiB,CACf,uFAAuF,CACxF,CACF,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"writeTools.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/writeTools.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,115 @@
|
|
|
1
|
+
import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
|
|
2
|
+
const dbMockState = vi.hoisted(() => ({
|
|
3
|
+
error: undefined,
|
|
4
|
+
inputCalls: [],
|
|
5
|
+
queryCalls: [],
|
|
6
|
+
queryResults: [],
|
|
7
|
+
}));
|
|
8
|
+
vi.mock("../db.js", () => ({
|
|
9
|
+
getSqlRequest: vi.fn(async () => {
|
|
10
|
+
if (dbMockState.error) {
|
|
11
|
+
return {
|
|
12
|
+
request: null,
|
|
13
|
+
error: dbMockState.error,
|
|
14
|
+
};
|
|
15
|
+
}
|
|
16
|
+
return {
|
|
17
|
+
request: {
|
|
18
|
+
input(name, value) {
|
|
19
|
+
dbMockState.inputCalls.push({ name, value });
|
|
20
|
+
},
|
|
21
|
+
async query(query) {
|
|
22
|
+
dbMockState.queryCalls.push(query);
|
|
23
|
+
return (dbMockState.queryResults.shift() ?? {
|
|
24
|
+
rowsAffected: [1],
|
|
25
|
+
recordset: [],
|
|
26
|
+
});
|
|
27
|
+
},
|
|
28
|
+
},
|
|
29
|
+
};
|
|
30
|
+
}),
|
|
31
|
+
}));
|
|
32
|
+
import { CreateIndexTool } from "../tools/CreateIndexTool.js";
|
|
33
|
+
import { CreateTableTool } from "../tools/CreateTableTool.js";
|
|
34
|
+
import { DeleteDataTool } from "../tools/DeleteDataTool.js";
|
|
35
|
+
import { InsertDataTool } from "../tools/InsertDataTool.js";
|
|
36
|
+
import { UpdateDataTool } from "../tools/UpdateDataTool.js";
|
|
37
|
+
describe("write tools", () => {
|
|
38
|
+
beforeEach(() => {
|
|
39
|
+
vi.spyOn(console, "error").mockImplementation(() => { });
|
|
40
|
+
dbMockState.error = undefined;
|
|
41
|
+
dbMockState.inputCalls.length = 0;
|
|
42
|
+
dbMockState.queryCalls.length = 0;
|
|
43
|
+
dbMockState.queryResults.length = 0;
|
|
44
|
+
});
|
|
45
|
+
afterEach(() => {
|
|
46
|
+
vi.restoreAllMocks();
|
|
47
|
+
});
|
|
48
|
+
it("parameterizes delete filters instead of interpolating raw SQL", async () => {
|
|
49
|
+
const tool = new DeleteDataTool();
|
|
50
|
+
const result = await tool.run({
|
|
51
|
+
tableName: "Order Details",
|
|
52
|
+
schemaName: "sales-data",
|
|
53
|
+
filters: [{ column: "Order ID", operator: "=", value: 42 }],
|
|
54
|
+
});
|
|
55
|
+
expect(result).toMatchObject({ success: true, rowsAffected: 1 });
|
|
56
|
+
expect(dbMockState.queryCalls[0]).toBe("DELETE FROM [sales-data].[Order Details] WHERE [Order ID] = @delete_filter_0");
|
|
57
|
+
expect(dbMockState.inputCalls).toEqual([
|
|
58
|
+
{ name: "delete_filter_0", value: 42 },
|
|
59
|
+
]);
|
|
60
|
+
});
|
|
61
|
+
it("parameterizes update filters and quotes updated columns", async () => {
|
|
62
|
+
const tool = new UpdateDataTool();
|
|
63
|
+
const result = await tool.run({
|
|
64
|
+
tableName: "Users",
|
|
65
|
+
updates: { "display name": "Ada" },
|
|
66
|
+
filters: [{ column: "id", operator: "IN", values: [1, 2] }],
|
|
67
|
+
});
|
|
68
|
+
expect(result).toMatchObject({ success: true, rowsAffected: 1 });
|
|
69
|
+
expect(dbMockState.queryCalls[0]).toBe("UPDATE [Users] SET [display name] = @update_0 WHERE [id] IN (@update_filter_0_0, @update_filter_0_1)");
|
|
70
|
+
expect(dbMockState.inputCalls).toEqual([
|
|
71
|
+
{ name: "update_0", value: "Ada" },
|
|
72
|
+
{ name: "update_filter_0_0", value: 1 },
|
|
73
|
+
{ name: "update_filter_0_1", value: 2 },
|
|
74
|
+
]);
|
|
75
|
+
});
|
|
76
|
+
it("quotes identifiers for inserts", async () => {
|
|
77
|
+
const tool = new InsertDataTool();
|
|
78
|
+
const result = await tool.run({
|
|
79
|
+
tableName: "Order Details",
|
|
80
|
+
data: {
|
|
81
|
+
"Customer Name": "Ada",
|
|
82
|
+
"Order ID": 10,
|
|
83
|
+
},
|
|
84
|
+
});
|
|
85
|
+
expect(result).toMatchObject({ success: true, recordsInserted: 1 });
|
|
86
|
+
expect(dbMockState.queryCalls[0]).toBe("INSERT INTO [Order Details] ([Customer Name], [Order ID]) VALUES (@value0, @value1)");
|
|
87
|
+
});
|
|
88
|
+
it("quotes identifiers for created indexes", async () => {
|
|
89
|
+
const tool = new CreateIndexTool();
|
|
90
|
+
const result = await tool.run({
|
|
91
|
+
schemaName: "sales-data",
|
|
92
|
+
tableName: "Order Details",
|
|
93
|
+
indexName: "IX Order Lookup",
|
|
94
|
+
columns: ["Order ID", "Line Number"],
|
|
95
|
+
});
|
|
96
|
+
expect(result).toMatchObject({ success: true });
|
|
97
|
+
expect(dbMockState.queryCalls[0]).toBe("CREATE NONCLUSTERED INDEX [IX Order Lookup] ON [sales-data].[Order Details] ([Order ID], [Line Number])");
|
|
98
|
+
});
|
|
99
|
+
it("rejects unsafe free-form column type fragments", async () => {
|
|
100
|
+
const tool = new CreateTableTool();
|
|
101
|
+
const result = await tool.run({
|
|
102
|
+
tableName: "Users",
|
|
103
|
+
columns: [
|
|
104
|
+
{
|
|
105
|
+
name: "id",
|
|
106
|
+
type: "INT); DROP TABLE users; --",
|
|
107
|
+
},
|
|
108
|
+
],
|
|
109
|
+
});
|
|
110
|
+
expect(result).toMatchObject({ success: false });
|
|
111
|
+
expect(String(result.message)).toContain("Unsupported SQL type declaration");
|
|
112
|
+
expect(dbMockState.queryCalls).toHaveLength(0);
|
|
113
|
+
});
|
|
114
|
+
});
|
|
115
|
+
//# sourceMappingURL=writeTools.test.js.map
|