@eamonboyle/mssql-mcp 1.1.0 → 1.2.0

package/dist/__tests__/schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.js","sourceRoot":"","sources":["../../src/__tests__/schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,kBAAkB,EAAE,CAAC;IACrB,UAAU,EAAE,EAA4D;IACxE,UAAU,EAAE,EAAc;IAC1B,YAAY,EAAE,EAGZ;CACH,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE;QACP,QAAQ,EAAE,UAAU;QACpB,GAAG,EAAE,KAAK;KACX;CACF,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QAC9B,eAAe,CAAC,kBAAkB,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,OAAO,EAAE;gBACP,KAAK,CAAC,IAAY,EAAE,IAAa,EAAE,KAAc;oBAC/C,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzD,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,KAAa;oBACvB,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACvC,OAAO,CACL,eAAe,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI;wBACtC,SAAS,EAAE,EAAE;wBACb,UAAU,EAAE,EAAE;qBACf,CACF,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,UAAU,CAAC,GAAG,EAAE;QACd,eAAe,CAAC,kBAAkB,GAAG,CAAC,CAAC;QACvC,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,eAAe,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC;YAChC,SAAS,EAAE;gBACT;oBACE,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK;oBACjB,QAAQ,EAAE,GAAG;oBACb,eAAe,EAAE,YAAY;oBAC7B,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,UAAU,EAAE,IAAI;iBACjB;gBACD;oBACE,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,GAAG;oBACb,eAAe,EAAE,MAAM;oBACvB,SAAS,EAAE,IAAI,IAAI,EAAE;oBACrB,UAAU,EAAE,IAAI,IAAI,EAAE;oBACtB,UAAU,EAAE,IAAI;iBACjB;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpE,mDAAmD,CACpD,CAAC;QACF,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,eAAe,CAAC,YAAY,CAAC,IAAI,CAC/B;YACE,SAAS,EAAE;gBACT;oBACE,QAAQ,EAAE,CAAC;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,KAAK;oBACjB,QAAQ,EAAE,GAAG;oBACb,eAAe,EAAE,YAAY;oBAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;oBACjC,UAAU,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC;oBAClC,UAAU,EAAE,IAAI;iBACjB;aACF;SACF,EACD;YACE,UAAU,EAAE;gBACV;oBACE;wBACE,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,CAAC;wBACZ,SAAS,EAAE,EAAE;wBACb,KAAK,EAAE,CAAC;wBACR,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,IAAI;wBAChB,YAAY,EAAE,IAAI;qBACnB;iBACF;gBACD;oBACE;wBACE,IAAI,EAAE,UAAU;wBAChB,IAAI,EAAE,WAAW;wBACjB,QAAQ,EAAE,IAAI;wBACd,UAAU,EAAE,IAAI;wBAChB,UAAU,EAAE,CAAC;qBACd;iBACF;aACF;SACF,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,OAAO;YACnB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,KAAK;iBAChB;aACF;YACD,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,CAAC,IAAI,CAAC;iBAChB;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/sql.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sql.test.d.ts.map

package/dist/__tests__/sql.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/sql.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/sql.test.js

@@ -0,0 +1,35 @@
+import { describe, expect, it } from "vitest";
+import { buildQualifiedName, getFriendlyObjectType, getObjectTypeCodes, quoteIdentifier, } from "../sql.js";
+describe("sql helpers", () => {
+    it("quotes safe identifiers", () => {
+        expect(quoteIdentifier("Users")).toBe("[Users]");
+        expect(buildQualifiedName("Users", "dbo")).toBe("[dbo].[Users]");
+        expect(quoteIdentifier("Order Details")).toBe("[Order Details]");
+        expect(quoteIdentifier("Users]Archive")).toBe("[Users]]Archive]");
+    });
+    it("rejects empty or control-character identifiers", () => {
+        expect(() => quoteIdentifier("")).toThrow("Invalid identifier.");
+        expect(() => buildQualifiedName("", "dbo")).toThrow("Invalid object name.");
+        expect(() => buildQualifiedName("Users", "dbo\u0000")).toThrow("Invalid schema name.");
+        expect(() => quoteIdentifier("Users\u0000Archive")).toThrow("Invalid identifier.");
+    });
+    it("maps friendly object types", () => {
+        expect(getFriendlyObjectType("U")).toBe("table");
+        expect(getFriendlyObjectType("V")).toBe("view");
+        expect(getFriendlyObjectType("P")).toBe("procedure");
+        expect(getFriendlyObjectType("FN")).toBe("function");
+        expect(getFriendlyObjectType("TR")).toBe("trigger");
+    });
+    it("resolves object type filters", () => {
+        expect(getObjectTypeCodes(["table", "view"])).toEqual(["U", "V"]);
+        expect(getObjectTypeCodes(["function"])).toEqual([
+            "FN",
+            "IF",
+            "TF",
+            "FS",
+            "FT",
+        ]);
+        expect(() => getObjectTypeCodes(["queue"])).toThrow("Unsupported object type 'queue'. Expected one of: table, view, procedure, function, trigger.");
+    });
+});
+//# sourceMappingURL=sql.test.js.map

package/dist/__tests__/sql.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.test.js","sourceRoot":"","sources":["../../src/__tests__/sql.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAC5D,sBAAsB,CACvB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CACzD,qBAAqB,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,IAAI;SACL,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CACjD,8FAA8F,CAC/F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/toolRegistry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=toolRegistry.test.d.ts.map

package/dist/__tests__/toolRegistry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolRegistry.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/toolRegistry.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/toolRegistry.test.js

@@ -0,0 +1,47 @@
+import { describe, expect, it } from "vitest";
+import { toolDefinitions } from "../toolRegistry.js";
+function getToolSchema(name) {
+    const definition = toolDefinitions.find((tool) => tool.tool.name === name);
+    if (!definition) {
+        throw new Error(`Missing tool definition for ${name}`);
+    }
+    return definition.inputSchema;
+}
+describe("toolRegistry write schemas", () => {
+    it("requires structured filters for update_data", () => {
+        const schema = getToolSchema("update_data");
+        expect(schema.safeParse({
+            tableName: "Users",
+            updates: { status: "active" },
+            whereClause: "id = 1",
+        }).success).toBe(false);
+        expect(schema.safeParse({
+            tableName: "Users",
+            updates: { status: "active" },
+            filters: [{ column: "id", operator: "=", value: 1 }],
+        }).success).toBe(true);
+    });
+    it("rejects unknown keys for delete_data", () => {
+        const schema = getToolSchema("delete_data");
+        expect(schema.safeParse({
+            tableName: "Users",
+            filters: [{ column: "id", operator: "=", value: 1 }],
+            extra: true,
+        }).success).toBe(false);
+    });
+    it("rejects extra column properties for create_table", () => {
+        const schema = getToolSchema("create_table");
+        expect(schema.safeParse({
+            tableName: "Users",
+            columns: [
+                {
+                    name: "id",
+                    type: "INT",
+                    nullable: false,
+                    unexpected: "value",
+                },
+            ],
+        }).success).toBe(false);
+    });
+});
+//# sourceMappingURL=toolRegistry.test.js.map

package/dist/__tests__/toolRegistry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolRegistry.test.js","sourceRoot":"","sources":["../../src/__tests__/toolRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,UAAU,CAAC,WAAW,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;QAE5C,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC7B,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEd,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;YAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;QAE5C,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACpD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;QAE7C,MAAM,CACJ,MAAM,CAAC,SAAS,CAAC;YACf,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,OAAO;iBACpB;aACF;SACF,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/validation.test.d.ts

@@ -1,2 +1,2 @@
-export {};
+export {};
 //# sourceMappingURL=validation.test.d.ts.map

package/dist/__tests__/validation.test.js

@@ -1,111 +1,111 @@
-import { describe, it, expect } from "vitest";
-import { validateReadQuery } from "../validation.js";
-describe("validateReadQuery", () => {
-    it("accepts simple SELECT query", () => {
-        expect(validateReadQuery("SELECT * FROM movies")).toEqual({
-            isValid: true,
-        });
-        expect(validateReadQuery("SELECT id, name FROM users WHERE id = 1")).toEqual({
-            isValid: true,
-        });
-    });
-    it("rejects empty or non-string input", () => {
-        expect(validateReadQuery("")).toEqual({
-            isValid: false,
-            error: "Query must be a non-empty string",
-        });
-        expect(validateReadQuery("   ")).toEqual({
-            isValid: false,
-            error: "Query cannot be empty after removing comments",
-        });
-        expect(validateReadQuery(null)).toEqual({
-            isValid: false,
-            error: "Query must be a non-empty string",
-        });
-    });
-    it("rejects query that does not start with SELECT", () => {
-        expect(validateReadQuery("DELETE FROM users")).toEqual({
-            isValid: false,
-            error: "Query must start with SELECT for security reasons",
-        });
-        expect(validateReadQuery("  UPDATE users SET x = 1")).toEqual({
-            isValid: false,
-            error: "Query must start with SELECT for security reasons",
-        });
-    });
-    it("rejects dangerous keywords", () => {
-        expect(validateReadQuery("SELECT * FROM users; DELETE FROM logs")).toEqual({
-            isValid: false,
-            error: expect.stringContaining("Dangerous keyword"),
-        });
-        expect(validateReadQuery("SELECT * INTO backup FROM users")).toEqual({
-            isValid: false,
-            error: expect.stringContaining("Dangerous keyword"),
-        });
-        expect(validateReadQuery("SELECT * FROM users; DROP TABLE users")).toEqual({
-            isValid: false,
-            error: expect.stringContaining("Dangerous keyword"),
-        });
-    });
-    it("rejects SELECT INTO pattern", () => {
-        const result = validateReadQuery("SELECT * INTO newtable FROM users");
-        expect(result.isValid).toBe(false);
-        expect(result.error).toBeDefined();
-    });
-    it("rejects multiple statements", () => {
-        const result = validateReadQuery("SELECT 1; SELECT 2");
-        expect(result.isValid).toBe(false);
-        expect(result.error).toBeDefined();
-    });
-    it("rejects character conversion functions", () => {
-        expect(validateReadQuery("SELECT CHAR(65) FROM users")).toEqual({
-            isValid: false,
-            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
-        });
-        expect(validateReadQuery("SELECT NCHAR(65) FROM users")).toEqual({
-            isValid: false,
-            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
-        });
-        expect(validateReadQuery("SELECT ASCII('A') FROM users")).toEqual({
-            isValid: false,
-            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
-        });
-    });
-    it("rejects query exceeding length limit", () => {
-        const longQuery = "SELECT * FROM users WHERE " + "x = 1 AND ".repeat(2000);
-        expect(longQuery.length).toBeGreaterThan(10000);
-        expect(validateReadQuery(longQuery)).toEqual({
-            isValid: false,
-            error: "Query is too long. Maximum allowed length is 10,000 characters.",
-        });
-    });
-    it("rejects stored procedure patterns", () => {
-        expect(validateReadQuery("SELECT * FROM sp_help")).toEqual({
-            isValid: false,
-            error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
-        });
-        expect(validateReadQuery("SELECT * FROM xp_cmdshell")).toEqual({
-            isValid: false,
-            error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
-        });
-    });
-    it("rejects WAITFOR delay/time patterns", () => {
-        const result = validateReadQuery("SELECT 1; WAITFOR DELAY '0:0:5'");
-        expect(result.isValid).toBe(false);
-        expect(result.error).toBeDefined();
-    });
-    it("rejects query that is only comments", () => {
-        expect(validateReadQuery("-- comment only")).toEqual({
-            isValid: false,
-            error: "Query cannot be empty after removing comments",
-        });
-        expect(validateReadQuery("/* block comment */")).toEqual({
-            isValid: false,
-            error: "Query cannot be empty after removing comments",
-        });
-    });
-    it("accepts SELECT with WHERE and JOIN", () => {
-        expect(validateReadQuery("SELECT u.id, u.name FROM users u JOIN orders o ON u.id = o.user_id WHERE u.active = 1")).toEqual({ isValid: true });
-    });
-});
+import { describe, it, expect } from "vitest";
+import { validateReadQuery } from "../validation.js";
+describe("validateReadQuery", () => {
+    it("accepts simple SELECT query", () => {
+        expect(validateReadQuery("SELECT * FROM movies")).toEqual({
+            isValid: true,
+        });
+        expect(validateReadQuery("SELECT id, name FROM users WHERE id = 1")).toEqual({
+            isValid: true,
+        });
+    });
+    it("rejects empty or non-string input", () => {
+        expect(validateReadQuery("")).toEqual({
+            isValid: false,
+            error: "Query must be a non-empty string",
+        });
+        expect(validateReadQuery("   ")).toEqual({
+            isValid: false,
+            error: "Query cannot be empty after removing comments",
+        });
+        expect(validateReadQuery(null)).toEqual({
+            isValid: false,
+            error: "Query must be a non-empty string",
+        });
+    });
+    it("rejects query that does not start with SELECT", () => {
+        expect(validateReadQuery("DELETE FROM users")).toEqual({
+            isValid: false,
+            error: "Query must start with SELECT for security reasons",
+        });
+        expect(validateReadQuery("  UPDATE users SET x = 1")).toEqual({
+            isValid: false,
+            error: "Query must start with SELECT for security reasons",
+        });
+    });
+    it("rejects dangerous keywords", () => {
+        expect(validateReadQuery("SELECT * FROM users; DELETE FROM logs")).toEqual({
+            isValid: false,
+            error: expect.stringContaining("Dangerous keyword"),
+        });
+        expect(validateReadQuery("SELECT * INTO backup FROM users")).toEqual({
+            isValid: false,
+            error: expect.stringContaining("Dangerous keyword"),
+        });
+        expect(validateReadQuery("SELECT * FROM users; DROP TABLE users")).toEqual({
+            isValid: false,
+            error: expect.stringContaining("Dangerous keyword"),
+        });
+    });
+    it("rejects SELECT INTO pattern", () => {
+        const result = validateReadQuery("SELECT * INTO newtable FROM users");
+        expect(result.isValid).toBe(false);
+        expect(result.error).toBeDefined();
+    });
+    it("rejects multiple statements", () => {
+        const result = validateReadQuery("SELECT 1; SELECT 2");
+        expect(result.isValid).toBe(false);
+        expect(result.error).toBeDefined();
+    });
+    it("rejects character conversion functions", () => {
+        expect(validateReadQuery("SELECT CHAR(65) FROM users")).toEqual({
+            isValid: false,
+            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
+        });
+        expect(validateReadQuery("SELECT NCHAR(65) FROM users")).toEqual({
+            isValid: false,
+            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
+        });
+        expect(validateReadQuery("SELECT ASCII('A') FROM users")).toEqual({
+            isValid: false,
+            error: "Character conversion functions are not allowed as they may be used for obfuscation.",
+        });
+    });
+    it("rejects query exceeding length limit", () => {
+        const longQuery = "SELECT * FROM users WHERE " + "x = 1 AND ".repeat(2000);
+        expect(longQuery.length).toBeGreaterThan(10000);
+        expect(validateReadQuery(longQuery)).toEqual({
+            isValid: false,
+            error: "Query is too long. Maximum allowed length is 10,000 characters.",
+        });
+    });
+    it("rejects stored procedure patterns", () => {
+        expect(validateReadQuery("SELECT * FROM sp_help")).toEqual({
+            isValid: false,
+            error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
+        });
+        expect(validateReadQuery("SELECT * FROM xp_cmdshell")).toEqual({
+            isValid: false,
+            error: "Potentially malicious SQL pattern detected. Only simple SELECT queries are allowed.",
+        });
+    });
+    it("rejects WAITFOR delay/time patterns", () => {
+        const result = validateReadQuery("SELECT 1; WAITFOR DELAY '0:0:5'");
+        expect(result.isValid).toBe(false);
+        expect(result.error).toBeDefined();
+    });
+    it("rejects query that is only comments", () => {
+        expect(validateReadQuery("-- comment only")).toEqual({
+            isValid: false,
+            error: "Query cannot be empty after removing comments",
+        });
+        expect(validateReadQuery("/* block comment */")).toEqual({
+            isValid: false,
+            error: "Query cannot be empty after removing comments",
+        });
+    });
+    it("accepts SELECT with WHERE and JOIN", () => {
+        expect(validateReadQuery("SELECT u.id, u.name FROM users u JOIN orders o ON u.id = o.user_id WHERE u.active = 1")).toEqual({ isValid: true });
+    });
+});
 //# sourceMappingURL=validation.test.js.map

package/dist/__tests__/validation.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../src/__tests__/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CACJ,iBAAiB,CAAC,yCAAyC,CAAC,CAC7D,CAAC,OAAO,CAAC;YACR,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,IAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,mCAAmC,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,4BAA4B,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iEAAiE;SACzE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YACnD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CACJ,iBAAiB,CACf,uFAAuF,CACxF,CACF,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../src/__tests__/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CACJ,iBAAiB,CAAC,yCAAyC,CAAC,CAC7D,CAAC,OAAO,CAAC;YACR,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,IAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3D,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,kCAAkC;SAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,mDAAmD;SAC3D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACpD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,mCAAmC,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,4BAA4B,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3C,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iEAAiE;SACzE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,OAAO,EAAE,KAAK;YACd,KAAK,EACH,qFAAqF;SACxF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;YACnD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;QACH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+CAA+C;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CACJ,iBAAiB,CACf,uFAAuF,CACxF,CACF,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/writeTools.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=writeTools.test.d.ts.map

package/dist/__tests__/writeTools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeTools.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/writeTools.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/writeTools.test.js

@@ -0,0 +1,115 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+const dbMockState = vi.hoisted(() => ({
+    error: undefined,
+    inputCalls: [],
+    queryCalls: [],
+    queryResults: [],
+}));
+vi.mock("../db.js", () => ({
+    getSqlRequest: vi.fn(async () => {
+        if (dbMockState.error) {
+            return {
+                request: null,
+                error: dbMockState.error,
+            };
+        }
+        return {
+            request: {
+                input(name, value) {
+                    dbMockState.inputCalls.push({ name, value });
+                },
+                async query(query) {
+                    dbMockState.queryCalls.push(query);
+                    return (dbMockState.queryResults.shift() ?? {
+                        rowsAffected: [1],
+                        recordset: [],
+                    });
+                },
+            },
+        };
+    }),
+}));
+import { CreateIndexTool } from "../tools/CreateIndexTool.js";
+import { CreateTableTool } from "../tools/CreateTableTool.js";
+import { DeleteDataTool } from "../tools/DeleteDataTool.js";
+import { InsertDataTool } from "../tools/InsertDataTool.js";
+import { UpdateDataTool } from "../tools/UpdateDataTool.js";
+describe("write tools", () => {
+    beforeEach(() => {
+        vi.spyOn(console, "error").mockImplementation(() => { });
+        dbMockState.error = undefined;
+        dbMockState.inputCalls.length = 0;
+        dbMockState.queryCalls.length = 0;
+        dbMockState.queryResults.length = 0;
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it("parameterizes delete filters instead of interpolating raw SQL", async () => {
+        const tool = new DeleteDataTool();
+        const result = await tool.run({
+            tableName: "Order Details",
+            schemaName: "sales-data",
+            filters: [{ column: "Order ID", operator: "=", value: 42 }],
+        });
+        expect(result).toMatchObject({ success: true, rowsAffected: 1 });
+        expect(dbMockState.queryCalls[0]).toBe("DELETE FROM [sales-data].[Order Details] WHERE [Order ID] = @delete_filter_0");
+        expect(dbMockState.inputCalls).toEqual([
+            { name: "delete_filter_0", value: 42 },
+        ]);
+    });
+    it("parameterizes update filters and quotes updated columns", async () => {
+        const tool = new UpdateDataTool();
+        const result = await tool.run({
+            tableName: "Users",
+            updates: { "display name": "Ada" },
+            filters: [{ column: "id", operator: "IN", values: [1, 2] }],
+        });
+        expect(result).toMatchObject({ success: true, rowsAffected: 1 });
+        expect(dbMockState.queryCalls[0]).toBe("UPDATE [Users] SET [display name] = @update_0 WHERE [id] IN (@update_filter_0_0, @update_filter_0_1)");
+        expect(dbMockState.inputCalls).toEqual([
+            { name: "update_0", value: "Ada" },
+            { name: "update_filter_0_0", value: 1 },
+            { name: "update_filter_0_1", value: 2 },
+        ]);
+    });
+    it("quotes identifiers for inserts", async () => {
+        const tool = new InsertDataTool();
+        const result = await tool.run({
+            tableName: "Order Details",
+            data: {
+                "Customer Name": "Ada",
+                "Order ID": 10,
+            },
+        });
+        expect(result).toMatchObject({ success: true, recordsInserted: 1 });
+        expect(dbMockState.queryCalls[0]).toBe("INSERT INTO [Order Details] ([Customer Name], [Order ID]) VALUES (@value0, @value1)");
+    });
+    it("quotes identifiers for created indexes", async () => {
+        const tool = new CreateIndexTool();
+        const result = await tool.run({
+            schemaName: "sales-data",
+            tableName: "Order Details",
+            indexName: "IX Order Lookup",
+            columns: ["Order ID", "Line Number"],
+        });
+        expect(result).toMatchObject({ success: true });
+        expect(dbMockState.queryCalls[0]).toBe("CREATE NONCLUSTERED INDEX [IX Order Lookup] ON [sales-data].[Order Details] ([Order ID], [Line Number])");
+    });
+    it("rejects unsafe free-form column type fragments", async () => {
+        const tool = new CreateTableTool();
+        const result = await tool.run({
+            tableName: "Users",
+            columns: [
+                {
+                    name: "id",
+                    type: "INT); DROP TABLE users; --",
+                },
+            ],
+        });
+        expect(result).toMatchObject({ success: false });
+        expect(String(result.message)).toContain("Unsupported SQL type declaration");
+        expect(dbMockState.queryCalls).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=writeTools.test.js.map

package/dist/__tests__/writeTools.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeTools.test.js","sourceRoot":"","sources":["../../src/__tests__/writeTools.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,KAAK,EAAE,SAA+B;IACtC,UAAU,EAAE,EAA6C;IACzD,UAAU,EAAE,EAAc;IAC1B,YAAY,EAAE,EAA+D;CAC9E,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,IAAa;gBACtB,KAAK,EAAE,WAAW,CAAC,KAAK;aACzB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE;gBACP,KAAK,CAAC,IAAY,EAAE,KAAc;oBAChC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,KAAa;oBACvB,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACnC,OAAO,CACL,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI;wBAClC,YAAY,EAAE,CAAC,CAAC,CAAC;wBACjB,SAAS,EAAE,EAAE;qBACd,CACF,CAAC;gBACJ,CAAC;aACF;SACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxD,WAAW,CAAC,KAAK,GAAG,SAAS,CAAC;QAC9B,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAClC,WAAW,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAClC,WAAW,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,IAAI,cAAc,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC5B,SAAS,EAAE,eAAe;YAC1B,UAAU,EAAE,YAAY;YACxB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpC,8EAA8E,CAC/E,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;YACrC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,EAAE;SACvC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,IAAI,GAAG,IAAI,cAAc,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC5B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;YAClC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpC,sGAAsG,CACvG,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;YACrC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE;YAClC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE;YACvC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,IAAI,GAAG,IAAI,cAAc,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC5B,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE;gBACJ,eAAe,EAAE,KAAK;gBACtB,UAAU,EAAE,EAAE;aACf;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpC,qFAAqF,CACtF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC5B,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,eAAe;YAC1B,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpC,yGAAyG,CAC1G,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC5B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,IAAI;oBACV,IAAI,EAAE,4BAA4B;iBACnC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC7E,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,5 @@
+export declare function getMaxRows(): number;
+export declare function getQueryTimeoutMs(): number;
+export declare function getDefaultSearchLimit(): number;
+export declare function clampRowLimit(limit: unknown, fallback?: number): number;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAqBA,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAK1C;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAe,GAAG,MAAM,CAa7E"}

package/dist/config.js

@@ -0,0 +1,34 @@
+const DEFAULT_MAX_ROWS = 10000;
+const DEFAULT_QUERY_TIMEOUT_MS = 30000;
+const DEFAULT_SEARCH_LIMIT = 100;
+function parsePositiveInt(value, fallback, minimum = 1) {
+    if (!value) {
+        return fallback;
+    }
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed < minimum) {
+        return fallback;
+    }
+    return parsed;
+}
+export function getMaxRows() {
+    return parsePositiveInt(process.env.MAX_ROWS, DEFAULT_MAX_ROWS);
+}
+export function getQueryTimeoutMs() {
+    return parsePositiveInt(process.env.QUERY_TIMEOUT_MS, DEFAULT_QUERY_TIMEOUT_MS);
+}
+export function getDefaultSearchLimit() {
+    return Math.min(getMaxRows(), DEFAULT_SEARCH_LIMIT);
+}
+export function clampRowLimit(limit, fallback = getMaxRows()) {
+    const parsed = typeof limit === "number"
+        ? limit
+        : typeof limit === "string"
+            ? Number.parseInt(limit, 10)
+            : Number.NaN;
+    if (!Number.isFinite(parsed) || parsed < 1) {
+        return Math.min(fallback, getMaxRows());
+    }
+    return Math.min(Math.floor(parsed), getMaxRows());
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,SAAS,gBAAgB,CACvB,KAAyB,EACzB,QAAgB,EAChB,OAAO,GAAG,CAAC;IAEX,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,gBAAgB,CACrB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAC5B,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,QAAQ,GAAG,UAAU,EAAE;IACnE,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAEnB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACpD,CAAC"}

package/dist/db.d.ts

@@ -1,25 +1,29 @@
-import sql from "mssql";
-/**
- * Returns the list of allowed database names.
- * If DATABASES is set, returns those; otherwise returns only DATABASE_NAME.
- */
-export declare function getAllowedDatabases(): string[];
-/**
- * Resolves the database name to use (param or default).
- * Returns null if invalid.
- */
-export declare function resolveDatabaseName(databaseName?: string): string | null;
-/**
- * Ensures a connection pool exists for the given database.
- */
-export declare function ensureSqlConnection(databaseName: string): Promise<sql.ConnectionPool>;
-/**
- * Returns a sql.Request for the given database.
- * Resolves database name (param or default), validates against allowed list,
- * ensures connection, and returns pool.request().
- */
-export declare function getSqlRequest(databaseName?: string): Promise<{
-    request: sql.Request;
-    error?: string;
-}>;
+import sql from "mssql";
+/**
+ * Returns the list of allowed database names.
+ * If DATABASES is set, returns those; otherwise returns only DATABASE_NAME.
+ */
+export declare function getAllowedDatabases(): string[];
+/**
+ * Resolves the database name to use (param or default).
+ * Returns null if invalid.
+ */
+export declare function resolveDatabaseName(databaseName?: string): string | null;
+/**
+ * Ensures a connection pool exists for the given database.
+ */
+export declare function ensureSqlConnection(databaseName: string): Promise<sql.ConnectionPool>;
+/**
+ * Returns a sql.Request for the given database.
+ * Resolves database name (param or default), validates against allowed list,
+ * ensures connection, and returns pool.request().
+ */
+export declare function getSqlRequest(databaseName?: string): Promise<{
+    request: sql.Request;
+    error?: string;
+}>;
+export declare function getDedicatedSqlPool(databaseName?: string): Promise<{
+    pool: sql.ConnectionPool;
+    error?: string;
+}>;
 //# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,OAAO,CAAC;AA+BxB;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAQ9C;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQxE;AAwBD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAoB7B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBnD"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,OAAO,CAAC;AAgCxB;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAQ9C;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQxE;AA6CD;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAoB7B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAWnD;AAED,wBAAsB,mBAAmB,CACvC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC;IAAE,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqBvD"}