@eamonboyle/mssql-mcp 1.0.0 → 1.2.0

package/dist/tools/UpdateDataTool.d.ts

@@ -1,17 +1,22 @@
-import { Tool } from "@modelcontextprotocol/sdk/types.js";
-export declare class UpdateDataTool implements Tool {
-    [key: string]: any;
-    name: string;
-    description: string;
-    inputSchema: any;
-    run(params: any): Promise<{
-        success: boolean;
-        message: string;
-        rowsAffected?: undefined;
-    } | {
-        success: boolean;
-        message: string;
-        rowsAffected: number;
-    }>;
-}
+import { type SqlFilter } from "../writeSafety.js";
+interface UpdateDataParams {
+    tableName: string;
+    updates: Record<string, unknown>;
+    filters: SqlFilter[];
+    databaseName?: string;
+}
+export declare class UpdateDataTool {
+    name: string;
+    description: string;
+    run(params: UpdateDataParams): Promise<{
+        success: boolean;
+        message: string;
+        rowsAffected?: undefined;
+    } | {
+        success: boolean;
+        message: string;
+        rowsAffected: number;
+    }>;
+}
+export {};
 //# sourceMappingURL=UpdateDataTool.d.ts.map

package/dist/tools/UpdateDataTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateDataTool.d.ts","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAG1D,qBAAa,cAAe,YAAW,IAAI;IACzC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IACnB,IAAI,SAAiB;IACrB,WAAW,SAAmH;IAC9H,WAAW,MAqBF;IAEH,GAAG,CAAC,MAAM,EAAE,GAAG;;;;;;;;;CAwCtB"}
+{"version":3,"file":"UpdateDataTool.d.ts","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAElF,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,cAAc;IACzB,IAAI,SAAiB;IACrB,WAAW,SACoE;IAEzE,GAAG,CAAC,MAAM,EAAE,gBAAgB;;;;;;;;;CA6CnC"}

package/dist/tools/UpdateDataTool.js

@@ -1,66 +1,46 @@
-import { getSqlRequest } from "../db.js";
-export class UpdateDataTool {
-    constructor() {
-        this.name = "update_data";
-        this.description = "Updates data in an MSSQL Database table using a WHERE clause. The WHERE clause must be provided for security.";
-        this.inputSchema = {
-            type: "object",
-            properties: {
-                tableName: {
-                    type: "string",
-                    description: "Name of the table to update"
-                },
-                updates: {
-                    type: "object",
-                    description: "Key-value pairs of columns to update. Example: { 'status': 'active', 'last_updated': '2025-01-01' }",
-                },
-                whereClause: {
-                    type: "string",
-                    description: "WHERE clause to identify which records to update. Example: \"genre = 'comedy' AND created_date <= '2025-07-05'\""
-                },
-                databaseName: {
-                    type: "string",
-                    description: "Name of the database to use (optional). Omit to use the default database."
-                },
-            },
-            required: ["tableName", "updates", "whereClause"],
-        };
-    }
-    async run(params) {
-        let query;
-        try {
-            const { tableName, updates, whereClause, databaseName } = params;
-            const { request, error } = await getSqlRequest(databaseName);
-            if (error) {
-                return { success: false, message: error };
-            }
-            // Basic validation: ensure whereClause is not empty
-            if (!whereClause || whereClause.trim() === '') {
-                throw new Error("WHERE clause is required for security reasons");
-            }
-            // Build SET clause with parameterized queries for security
-            const setClause = Object.keys(updates)
-                .map((key, index) => {
-                const paramName = `update_${index}`;
-                request.input(paramName, updates[key]);
-                return `[${key}] = @${paramName}`;
-            })
-                .join(", ");
-            query = `UPDATE ${tableName} SET ${setClause} WHERE ${whereClause}`;
-            const result = await request.query(query);
-            return {
-                success: true,
-                message: `Update completed successfully. ${result.rowsAffected[0]} row(s) affected`,
-                rowsAffected: result.rowsAffected[0],
-            };
-        }
-        catch (error) {
-            console.error("Error updating data:", error);
-            return {
-                success: false,
-                message: `Failed to update data ${query ? ` with '${query}'` : ''}: ${error}`,
-            };
-        }
-    }
-}
+import { getSqlRequest } from "../db.js";
+import { buildQualifiedName, quoteIdentifier } from "../sql.js";
+import { buildParameterizedWhereClause } from "../writeSafety.js";
+export class UpdateDataTool {
+    constructor() {
+        this.name = "update_data";
+        this.description = "Updates data in an MSSQL Database table using required structured filters.";
+    }
+    async run(params) {
+        let query;
+        try {
+            const { tableName, updates, filters, databaseName } = params;
+            const { request, error } = await getSqlRequest(databaseName);
+            if (error) {
+                return { success: false, message: error };
+            }
+            const updateColumns = Object.keys(updates);
+            if (updateColumns.length === 0) {
+                throw new Error("At least one column update is required.");
+            }
+            const setClause = updateColumns
+                .map((key, index) => {
+                const paramName = `update_${index}`;
+                request.input(paramName, updates[key]);
+                return `${quoteIdentifier(key)} = @${paramName}`;
+            })
+                .join(", ");
+            const whereClause = buildParameterizedWhereClause(filters, (name, value) => request.input(name, value), "update_filter");
+            query = `UPDATE ${buildQualifiedName(tableName)} SET ${setClause} WHERE ${whereClause}`;
+            const result = await request.query(query);
+            return {
+                success: true,
+                message: `Update completed successfully. ${result.rowsAffected[0]} row(s) affected`,
+                rowsAffected: result.rowsAffected[0],
+            };
+        }
+        catch (error) {
+            console.error("Error updating data:", error);
+            return {
+                success: false,
+                message: `Failed to update data ${query ? ` with '${query}'` : ""}: ${error}`,
+            };
+        }
+    }
+}
 //# sourceMappingURL=UpdateDataTool.js.map

package/dist/tools/UpdateDataTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateDataTool.js","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,OAAO,cAAc;IAA3B;QAEE,SAAI,GAAG,aAAa,CAAC;QACrB,gBAAW,GAAG,+GAA+G,CAAC;QAC9H,gBAAW,GAAG;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6BAA6B;iBAC3C;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qGAAqG;iBACnH;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,kHAAkH;iBAChI;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,2EAA2E;iBACzF;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;SAC3C,CAAC;IA0CX,CAAC;IAxCC,KAAK,CAAC,GAAG,CAAC,MAAW;QACnB,IAAI,KAAyB,CAAC;QAC9B,IAAI;YACF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEjE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE;gBACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;aAC3C;YAED,oDAAoD;YACpD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aAClE;YAED,2DAA2D;YAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;iBACnC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAClB,MAAM,SAAS,GAAG,UAAU,KAAK,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvC,OAAO,IAAI,GAAG,QAAQ,SAAS,EAAE,CAAC;YACpC,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,KAAK,GAAG,UAAU,SAAS,QAAQ,SAAS,UAAU,WAAW,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,kCAAkC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;gBACnF,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;aACrC,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yBAAyB,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE;aAC9E,CAAC;SACH;IACH,CAAC;CACF"}
+{"version":3,"file":"UpdateDataTool.js","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAkB,MAAM,mBAAmB,CAAC;AASlF,MAAM,OAAO,cAAc;IAA3B;QACE,SAAI,GAAG,aAAa,CAAC;QACrB,gBAAW,GACT,4EAA4E,CAAC;IA+CjF,CAAC;IA7CC,KAAK,CAAC,GAAG,CAAC,MAAwB;QAChC,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAE7D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,SAAS,GAAG,aAAa;iBAC5B,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAClB,MAAM,SAAS,GAAG,UAAU,KAAK,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvC,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,SAAS,EAAE,CAAC;YACnD,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,WAAW,GAAG,6BAA6B,CAC/C,OAAO,EACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAC3C,eAAe,CAChB,CAAC;YAEF,KAAK,GAAG,UAAU,kBAAkB,CAAC,SAAS,CAAC,QAAQ,SAAS,UAAU,WAAW,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,kCAAkC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;gBACnF,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yBAAyB,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/validation.d.ts

@@ -0,0 +1,14 @@
+/**
+ * SQL query validation for read-only operations.
+ * Extracted for testability and reuse.
+ */
+export interface ValidationResult {
+    isValid: boolean;
+    error?: string;
+}
+/**
+ * Validates a SQL query for read-only (SELECT) operations.
+ * Rejects dangerous keywords, injection patterns, and multi-statement queries.
+ */
+export declare function validateReadQuery(query: string): ValidationResult;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8DH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAoFjE"}

package/dist/validation.js

@@ -0,0 +1,134 @@
+/**
+ * SQL query validation for read-only operations.
+ * Extracted for testability and reuse.
+ */
+const DANGEROUS_KEYWORDS = [
+    "DELETE",
+    "DROP",
+    "UPDATE",
+    "INSERT",
+    "ALTER",
+    "CREATE",
+    "TRUNCATE",
+    "EXEC",
+    "EXECUTE",
+    "MERGE",
+    "REPLACE",
+    "GRANT",
+    "REVOKE",
+    "COMMIT",
+    "ROLLBACK",
+    "TRANSACTION",
+    "BEGIN",
+    "DECLARE",
+    "SET",
+    "USE",
+    "BACKUP",
+    "RESTORE",
+    "KILL",
+    "SHUTDOWN",
+    "WAITFOR",
+    "OPENROWSET",
+    "OPENDATASOURCE",
+    "OPENQUERY",
+    "OPENXML",
+    "BULK",
+    "INTO",
+];
+const DANGEROUS_PATTERNS = [
+    /SELECT\s+.*?\s+INTO\s+/i,
+    /;\s*(DELETE|DROP|UPDATE|INSERT|ALTER|CREATE|TRUNCATE|EXEC|EXECUTE|MERGE|REPLACE|GRANT|REVOKE)/i,
+    /UNION\s+(?:ALL\s+)?SELECT.*?(DELETE|DROP|UPDATE|INSERT|ALTER|CREATE|TRUNCATE|EXEC|EXECUTE)/i,
+    /--.*?(DELETE|DROP|UPDATE|INSERT|ALTER|CREATE|TRUNCATE|EXEC|EXECUTE)/i,
+    /\/\*.*?(DELETE|DROP|UPDATE|INSERT|ALTER|CREATE|TRUNCATE|EXEC|EXECUTE).*?\*\//i,
+    /EXEC\s*\(/i,
+    /EXECUTE\s*\(/i,
+    /sp_/i,
+    /xp_/i,
+    /BULK\s+INSERT/i,
+    /OPENROWSET/i,
+    /OPENDATASOURCE/i,
+    /@@/,
+    /SYSTEM_USER/i,
+    /USER_NAME/i,
+    /DB_NAME/i,
+    /HOST_NAME/i,
+    /WAITFOR\s+DELAY/i,
+    /WAITFOR\s+TIME/i,
+    /;\s*\w/,
+    /\+\s*CHAR\s*\(/i,
+    /\+\s*NCHAR\s*\(/i,
+    /\+\s*ASCII\s*\(/i,
+];
+/**
+ * Validates a SQL query for read-only (SELECT) operations.
+ * Rejects dangerous keywords, injection patterns, and multi-statement queries.
+ */
+export function validateReadQuery(query) {
+    if (!query || typeof query !== "string") {
+        return {
+            isValid: false,
+            error: "Query must be a non-empty string",
+        };
+    }
+    const cleanQuery = query
+        .replace(/--.*$/gm, "")
+        .replace(/\/\*[\s\S]*?\*\//g, "")
+        .replace(/\s+/g, " ")
+        .trim();
+    if (!cleanQuery) {
+        return {
+            isValid: false,
+            error: "Query cannot be empty after removing comments",
+        };
+    }
+    const upperQuery = cleanQuery.toUpperCase();
+    if (!upperQuery.startsWith("SELECT")) {
+        return {
+            isValid: false,
+            error: "Query must start with SELECT for security reasons",
+        };
+    }
+    for (const keyword of DANGEROUS_KEYWORDS) {
+        const keywordRegex = new RegExp(`(^|\\s|[^A-Za-z0-9_])${keyword}($|\\s|[^A-Za-z0-9_])`, "i");
+        if (keywordRegex.test(upperQuery)) {
+            return {
+                isValid: false,
+                error: `Dangerous keyword '${keyword}' detected in query. Only SELECT operations are allowed.`,
+            };
+        }
+    }
+    for (const pattern of DANGEROUS_PATTERNS) {
+        if (pattern.test(query)) {
+            return {
+                isValid: false,
+                error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
+            };
+        }
+    }
+    const statements = cleanQuery
+        .split(";")
+        .filter((stmt) => stmt.trim().length > 0);
+    if (statements.length > 1) {
+        return {
+            isValid: false,
+            error: "Multiple SQL statements are not allowed. Use only a single SELECT statement.",
+        };
+    }
+    if (query.includes("CHAR(") ||
+        query.includes("NCHAR(") ||
+        query.includes("ASCII(")) {
+        return {
+            isValid: false,
+            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
+        };
+    }
+    if (query.length > 10000) {
+        return {
+            isValid: false,
+            error: "Query is too long. Maximum allowed length is 10,000 characters.",
+        };
+    }
+    return { isValid: true };
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,kBAAkB,GAAG;IACzB,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,aAAa;IACb,OAAO;IACP,SAAS;IACT,KAAK;IACL,KAAK;IACL,QAAQ;IACR,SAAS;IACT,MAAM;IACN,UAAU;IACV,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,MAAM;IACN,MAAM;CACP,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,yBAAyB;IACzB,gGAAgG;IAChG,6FAA6F;IAC7F,sEAAsE;IACtE,+EAA+E;IAC/E,YAAY;IACZ,eAAe;IACf,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,aAAa;IACb,iBAAiB;IACjB,IAAI;IACJ,cAAc;IACd,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,kBAAkB;IAClB,iBAAiB;IACjB,QAAQ;IACR,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;CACnB,CAAC;AAOF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK;SACrB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAE5C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,MAAM,CAC7B,wBAAwB,OAAO,uBAAuB,EACtD,GAAG,CACJ,CAAC;QACF,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sBAAsB,OAAO,0DAA0D;aAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EACH,qFAAqF;aACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,UAAU;SAC1B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EACH,8EAA8E;SACjF,CAAC;IACJ,CAAC;IAED,IACE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACxB,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iEAAiE;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/writeSafety.d.ts

@@ -0,0 +1,21 @@
+export declare const SQL_FILTER_OPERATORS: readonly ["=", "!=", ">", ">=", "<", "<=", "LIKE", "IN", "IS NULL", "IS NOT NULL"];
+export type SqlFilterOperator = (typeof SQL_FILTER_OPERATORS)[number];
+export interface SqlFilter {
+    column: string;
+    operator: SqlFilterOperator;
+    value?: unknown;
+    values?: unknown[];
+}
+export interface SqlTypeDeclaration {
+    type: string;
+    nullable?: boolean;
+    isPrimaryKey?: boolean;
+    isUnique?: boolean;
+    isIdentity?: boolean;
+    identitySeed?: number;
+    identityIncrement?: number;
+}
+export declare function normalizeSqlType(rawType: string): string;
+export declare function buildCreateColumnDefinition(columnName: string, declaration: SqlTypeDeclaration): string;
+export declare function buildParameterizedWhereClause(filters: SqlFilter[], input: (name: string, value: unknown) => unknown, parameterPrefix?: string): string;
+//# sourceMappingURL=writeSafety.d.ts.map

package/dist/writeSafety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeSafety.d.ts","sourceRoot":"","sources":["../src/writeSafety.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,oBAAoB,oFAWvB,CAAC;AAGX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAqFD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA6BxD;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,kBAAkB,GAC9B,MAAM,CAwBR;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,EAAE,EACpB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,EAChD,eAAe,SAAW,GACzB,MAAM,CA0CR"}

package/dist/writeSafety.js

@@ -0,0 +1,169 @@
+import { quoteIdentifier } from "./sql.js";
+export const SQL_FILTER_OPERATORS = [
+    "=",
+    "!=",
+    ">",
+    ">=",
+    "<",
+    "<=",
+    "LIKE",
+    "IN",
+    "IS NULL",
+    "IS NOT NULL",
+];
+const FILTER_OPERATOR_SET = new Set(SQL_FILTER_OPERATORS);
+const LENGTH_TYPES = new Set([
+    "binary",
+    "char",
+    "nchar",
+    "nvarchar",
+    "varbinary",
+    "varchar",
+]);
+const PRECISION_SCALE_TYPES = new Set(["decimal", "numeric"]);
+const OPTIONAL_PRECISION_TYPES = new Set(["float"]);
+const OPTIONAL_SCALE_TYPES = new Set(["datetime2", "datetimeoffset", "time"]);
+const SIMPLE_TYPES = new Set([
+    "bigint",
+    "bit",
+    "date",
+    "datetime",
+    "image",
+    "int",
+    "money",
+    "ntext",
+    "real",
+    "smalldatetime",
+    "smallint",
+    "smallmoney",
+    "sql_variant",
+    "text",
+    "tinyint",
+    "uniqueidentifier",
+    "xml",
+]);
+function assertPositiveInteger(value, label) {
+    if (!Number.isInteger(value) || value < 0) {
+        throw new Error(`Invalid ${label}.`);
+    }
+}
+function normalizeTypeParameterList(typeName, params) {
+    if (LENGTH_TYPES.has(typeName)) {
+        const normalized = params.trim().toUpperCase();
+        if (normalized === "MAX") {
+            return "(MAX)";
+        }
+        const parsed = Number.parseInt(normalized, 10);
+        if (!Number.isInteger(parsed) || parsed <= 0) {
+            throw new Error(`Invalid length for SQL type '${typeName}'.`);
+        }
+        return `(${parsed})`;
+    }
+    if (PRECISION_SCALE_TYPES.has(typeName)) {
+        const match = params.match(/^\s*(\d+)\s*,\s*(\d+)\s*$/);
+        if (!match) {
+            throw new Error(`Invalid precision/scale for SQL type '${typeName}'.`);
+        }
+        return `(${Number.parseInt(match[1], 10)}, ${Number.parseInt(match[2], 10)})`;
+    }
+    if (OPTIONAL_PRECISION_TYPES.has(typeName)) {
+        const parsed = Number.parseInt(params.trim(), 10);
+        if (!Number.isInteger(parsed) || parsed <= 0) {
+            throw new Error(`Invalid precision for SQL type '${typeName}'.`);
+        }
+        return `(${parsed})`;
+    }
+    if (OPTIONAL_SCALE_TYPES.has(typeName)) {
+        const parsed = Number.parseInt(params.trim(), 10);
+        if (!Number.isInteger(parsed) || parsed < 0) {
+            throw new Error(`Invalid scale for SQL type '${typeName}'.`);
+        }
+        return `(${parsed})`;
+    }
+    throw new Error(`SQL type '${typeName}' does not accept parameters.`);
+}
+export function normalizeSqlType(rawType) {
+    if (typeof rawType !== "string" || rawType.trim() === "") {
+        throw new Error("Column type is required.");
+    }
+    const trimmed = rawType.trim();
+    const match = trimmed.match(/^([A-Za-z][A-Za-z0-9_]*)(?:\(([^)]+)\))?$/);
+    if (!match) {
+        throw new Error(`Unsupported SQL type declaration '${rawType}'.`);
+    }
+    const typeName = match[1].toLowerCase();
+    const rawParams = match[2];
+    if (!LENGTH_TYPES.has(typeName) &&
+        !PRECISION_SCALE_TYPES.has(typeName) &&
+        !OPTIONAL_PRECISION_TYPES.has(typeName) &&
+        !OPTIONAL_SCALE_TYPES.has(typeName) &&
+        !SIMPLE_TYPES.has(typeName)) {
+        throw new Error(`Unsupported SQL type '${rawType}'.`);
+    }
+    if (!rawParams) {
+        return typeName.toUpperCase();
+    }
+    return `${typeName.toUpperCase()}${normalizeTypeParameterList(typeName, rawParams)}`;
+}
+export function buildCreateColumnDefinition(columnName, declaration) {
+    const fragments = [quoteIdentifier(columnName), normalizeSqlType(declaration.type)];
+    if (declaration.isIdentity) {
+        const seed = declaration.identitySeed ?? 1;
+        const increment = declaration.identityIncrement ?? 1;
+        assertPositiveInteger(seed, "identity seed");
+        assertPositiveInteger(increment, "identity increment");
+        fragments.push(`IDENTITY(${seed}, ${increment})`);
+    }
+    if (declaration.isPrimaryKey) {
+        fragments.push("PRIMARY KEY");
+    }
+    else if (declaration.isUnique) {
+        fragments.push("UNIQUE");
+    }
+    if (declaration.nullable === false || declaration.isPrimaryKey) {
+        fragments.push("NOT NULL");
+    }
+    else if (declaration.nullable === true) {
+        fragments.push("NULL");
+    }
+    return fragments.join(" ");
+}
+export function buildParameterizedWhereClause(filters, input, parameterPrefix = "filter") {
+    if (!Array.isArray(filters) || filters.length === 0) {
+        throw new Error("At least one filter is required.");
+    }
+    return filters
+        .map((filter, index) => {
+        const columnName = quoteIdentifier(filter.column);
+        const operator = filter.operator;
+        if (!FILTER_OPERATOR_SET.has(operator)) {
+            throw new Error(`Unsupported filter operator '${operator}'.`);
+        }
+        switch (operator) {
+            case "IS NULL":
+            case "IS NOT NULL":
+                return `${columnName} ${operator}`;
+            case "IN": {
+                if (!Array.isArray(filter.values) || filter.values.length === 0) {
+                    throw new Error(`Filter '${filter.column}' requires a non-empty 'values' array.`);
+                }
+                const placeholders = filter.values.map((value, valueIndex) => {
+                    const parameterName = `${parameterPrefix}_${index}_${valueIndex}`;
+                    input(parameterName, value);
+                    return `@${parameterName}`;
+                });
+                return `${columnName} IN (${placeholders.join(", ")})`;
+            }
+            default: {
+                if (!("value" in filter)) {
+                    throw new Error(`Filter '${filter.column}' requires a 'value'.`);
+                }
+                const parameterName = `${parameterPrefix}_${index}`;
+                input(parameterName, filter.value);
+                return `${columnName} ${operator} @${parameterName}`;
+            }
+        }
+    })
+        .join(" AND ");
+}
+//# sourceMappingURL=writeSafety.js.map

package/dist/writeSafety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeSafety.js","sourceRoot":"","sources":["../src/writeSafety.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,GAAG;IACH,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,SAAS;IACT,aAAa;CACL,CAAC;AACX,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AAqBlE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ;IACR,MAAM;IACN,OAAO;IACP,UAAU;IACV,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAC9D,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ;IACR,KAAK;IACL,MAAM;IACN,UAAU;IACV,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,eAAe;IACf,UAAU;IACV,YAAY;IACZ,aAAa;IACb,MAAM;IACN,SAAS;IACT,kBAAkB;IAClB,KAAK;CACN,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAgB,EAAE,MAAc;IAClE,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,IAAI,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,MAAM,GAAG,CAAC;IACvB,CAAC;IAED,IAAI,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,IAAI,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;IAChF,CAAC;IAED,IAAI,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,MAAM,GAAG,CAAC;IACvB,CAAC;IAED,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,IAAI,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,IAAI,MAAM,GAAG,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,+BAA+B,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IACE,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC3B,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACpC,CAAC,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnC,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,0BAA0B,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,WAA+B;IAE/B,MAAM,SAAS,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpF,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,IAAI,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACrD,qBAAqB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC7C,qBAAqB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACvD,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,KAAK,SAAS,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,WAAW,CAAC,QAAQ,KAAK,KAAK,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC/D,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,WAAW,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAoB,EACpB,KAAgD,EAChD,eAAe,GAAG,QAAQ;IAE1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,IAAI,CAAC,CAAC;QAChE,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,SAAS,CAAC;YACf,KAAK,aAAa;gBAChB,OAAO,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;YACrC,KAAK,IAAI,CAAC,CAAC,CAAC;gBACV,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAChE,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,MAAM,wCAAwC,CAAC,CAAC;gBACpF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;oBAC3D,MAAM,aAAa,GAAG,GAAG,eAAe,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;oBAClE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;oBAC5B,OAAO,IAAI,aAAa,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBAEH,OAAO,GAAG,UAAU,QAAQ,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,MAAM,uBAAuB,CAAC,CAAC;gBACnE,CAAC;gBAED,MAAM,aAAa,GAAG,GAAG,eAAe,IAAI,KAAK,EAAE,CAAC;gBACpD,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACnC,OAAO,GAAG,UAAU,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;SACD,IAAI,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eamonboyle/mssql-mcp",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "MCP server for Microsoft SQL Server - query and manage your database with natural language in Cursor, Claude, and VS Code",
   "keywords": [
     "mcp",
@@ -29,7 +29,11 @@
     "build": "tsc && shx chmod +x dist/*.js",
     "prepare": "npm run build",
     "watch": "tsc --watch",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src",
+    "format": "prettier --write src"
   },
   "files": [
     "dist"
@@ -38,15 +42,22 @@
     "node": ">=18.0.0"
   },
   "devDependencies": {
+    "@eslint/js": "^9.39.2",
     "@types/mssql": "^9.1.7",
-    "@types/node": "^16.7.13",
+    "@types/node": "^20.0.0",
+    "eslint": "^9.39.2",
+    "eslint-config-prettier": "^10.1.8",
+    "prettier": "^3.8.1",
     "shx": "^0.3.4",
-    "typescript": "^4.9.5"
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.55.0",
+    "vitest": "^2.1.0"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@modelcontextprotocol/sdk": "^1.28.0",
     "dotenv": "^10.0.0",
-    "mssql": "^11.0.1"
+    "mssql": "^11.0.1",
+    "zod": "^4.3.6"
   },
   "type": "module"
 }