@eamonboyle/mssql-mcp 1.1.0 → 1.2.0

package/dist/tools/ReadDataTool.js

@@ -1,106 +1,93 @@
-import { getSqlRequest } from "../db.js";
-import { validateReadQuery } from "../validation.js";
-export class ReadDataTool {
-    constructor() {
-        this.name = "read_data";
-        this.description = "Executes a SELECT query on an MSSQL Database table. The query must start with SELECT and cannot contain any destructive SQL operations for security reasons.";
-        this.inputSchema = {
-            type: "object",
-            properties: {
-                query: {
-                    type: "string",
-                    description: "SQL SELECT query to execute (must start with SELECT and cannot contain destructive operations). Example: SELECT * FROM movies WHERE genre = 'comedy'",
-                },
-                databaseName: {
-                    type: "string",
-                    description: "Name of the database to query (optional). Omit to use the default configured database.",
-                },
-            },
-            required: ["query"],
-        };
-    }
-    /**
-     * Sanitizes the query result to prevent any potential security issues
-     * @param data The query result data
-     * @returns Sanitized data
-     */
-    sanitizeResult(data) {
-        if (!Array.isArray(data)) {
-            return [];
-        }
-        // Limit the number of returned records to prevent memory issues
-        const maxRecords = 10000;
-        if (data.length > maxRecords) {
-            console.warn(`Query returned ${data.length} records, limiting to ${maxRecords}`);
-            return data.slice(0, maxRecords);
-        }
-        return data.map((record) => {
-            if (typeof record === "object" && record !== null) {
-                const sanitized = {};
-                for (const [key, value] of Object.entries(record)) {
-                    // Sanitize column names (remove any suspicious characters)
-                    const sanitizedKey = key.replace(/[^\w\s-_.]/g, "");
-                    if (sanitizedKey !== key) {
-                        console.warn(`Column name sanitized: ${key} -> ${sanitizedKey}`);
-                    }
-                    sanitized[sanitizedKey] = value;
-                }
-                return sanitized;
-            }
-            return record;
-        });
-    }
-    /**
-     * Executes the validated SQL query
-     * @param params Query parameters
-     * @returns Query execution result
-     */
-    async run(params) {
-        try {
-            const { query, databaseName } = params;
-            const { request, error } = await getSqlRequest(databaseName);
-            if (error) {
-                return { success: false, message: error, error: "INVALID_DATABASE" };
-            }
-            // Validate the query for security issues
-            const validation = validateReadQuery(query);
-            if (!validation.isValid) {
-                console.warn(`Security validation failed for query: ${query.substring(0, 100)}...`);
-                return {
-                    success: false,
-                    message: `Security validation failed: ${validation.error}`,
-                    error: "SECURITY_VALIDATION_FAILED",
-                };
-            }
-            // Log the query for audit purposes (in production, consider more secure logging)
-            console.log(`Executing validated SELECT query: ${query.substring(0, 200)}${query.length > 200 ? "..." : ""}`);
-            // Execute the query
-            const result = await request.query(query);
-            // Sanitize the result
-            const sanitizedData = this.sanitizeResult(result.recordset);
-            return {
-                success: true,
-                message: `Query executed successfully. Retrieved ${sanitizedData.length} record(s)${result.recordset.length !== sanitizedData.length
-                    ? ` (limited from ${result.recordset.length} total records)`
-                    : ""}`,
-                data: sanitizedData,
-                recordCount: sanitizedData.length,
-                totalRecords: result.recordset.length,
-            };
-        }
-        catch (error) {
-            console.error("Error executing query:", error);
-            // Don't expose internal error details to prevent information leakage
-            const errorMessage = error instanceof Error ? error.message : "Unknown error occurred";
-            const safeErrorMessage = errorMessage.includes("Invalid object name")
-                ? errorMessage
-                : "Database query execution failed";
-            return {
-                success: false,
-                message: `Failed to execute query: ${safeErrorMessage}`,
-                error: "QUERY_EXECUTION_FAILED",
-            };
-        }
-    }
-}
+import { getMaxRows } from "../config.js";
+import { getSqlRequest } from "../db.js";
+import { validateReadQuery } from "../validation.js";
+export class ReadDataTool {
+    constructor() {
+        this.name = "read_data";
+        this.description = "Executes a SELECT query on an MSSQL Database table. The query must start with SELECT and cannot contain any destructive SQL operations for security reasons.";
+    }
+    /**
+     * Sanitizes the query result to prevent any potential security issues
+     * @param data The query result data
+     * @returns Sanitized data
+     */
+    sanitizeResult(data) {
+        if (!Array.isArray(data)) {
+            return [];
+        }
+        // Limit the number of returned records to prevent memory issues
+        const maxRecords = getMaxRows();
+        if (data.length > maxRecords) {
+            console.warn(`Query returned ${data.length} records, limiting to ${maxRecords}`);
+            return data.slice(0, maxRecords);
+        }
+        return data.map((record) => {
+            if (typeof record === "object" && record !== null) {
+                const sanitized = {};
+                for (const [key, value] of Object.entries(record)) {
+                    // Sanitize column names (remove any suspicious characters)
+                    const sanitizedKey = key.replace(/[^\w\s-_.]/g, "");
+                    if (sanitizedKey !== key) {
+                        console.warn(`Column name sanitized: ${key} -> ${sanitizedKey}`);
+                    }
+                    sanitized[sanitizedKey] = value;
+                }
+                return sanitized;
+            }
+            return record;
+        });
+    }
+    /**
+     * Executes the validated SQL query
+     * @param params Query parameters
+     * @returns Query execution result
+     */
+    async run(params) {
+        try {
+            const { query, databaseName } = params;
+            const { request, error } = await getSqlRequest(databaseName);
+            if (error) {
+                return { success: false, message: error, error: "INVALID_DATABASE" };
+            }
+            // Validate the query for security issues
+            const validation = validateReadQuery(query);
+            if (!validation.isValid) {
+                console.warn(`Security validation failed for query: ${query.substring(0, 100)}...`);
+                return {
+                    success: false,
+                    message: `Security validation failed: ${validation.error}`,
+                    error: "SECURITY_VALIDATION_FAILED",
+                };
+            }
+            // Log the query for audit purposes (in production, consider more secure logging)
+            console.log(`Executing validated SELECT query: ${query.substring(0, 200)}${query.length > 200 ? "..." : ""}`);
+            // Execute the query
+            const result = await request.query(query);
+            // Sanitize the result
+            const sanitizedData = this.sanitizeResult(result.recordset);
+            return {
+                success: true,
+                message: `Query executed successfully. Retrieved ${sanitizedData.length} record(s)${result.recordset.length !== sanitizedData.length
+                    ? ` (limited from ${result.recordset.length} total records)`
+                    : ""}`,
+                data: sanitizedData,
+                recordCount: sanitizedData.length,
+                totalRecords: result.recordset.length,
+            };
+        }
+        catch (error) {
+            console.error("Error executing query:", error);
+            // Don't expose internal error details to prevent information leakage
+            const errorMessage = error instanceof Error ? error.message : "Unknown error occurred";
+            const safeErrorMessage = errorMessage.includes("Invalid object name")
+                ? errorMessage
+                : "Database query execution failed";
+            return {
+                success: false,
+                message: `Failed to execute query: ${safeErrorMessage}`,
+                error: "QUERY_EXECUTION_FAILED",
+            };
+        }
+    }
+}
 //# sourceMappingURL=ReadDataTool.js.map

package/dist/tools/ReadDataTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"ReadDataTool.js","sourceRoot":"","sources":["../../src/tools/ReadDataTool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,OAAO,YAAY;IAAzB;QAEE,SAAI,GAAG,WAAW,CAAC;QACnB,gBAAW,GACT,8JAA8J,CAAC;QAEjK,gBAAW,GAAG;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,sJAAsJ;iBACzJ;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,wFAAwF;iBAC3F;aACF;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;SACb,CAAC;IAwGX,CAAC;IAtGC;;;;OAIG;IACK,cAAc,CAAC,IAAW;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACxB,OAAO,EAAE,CAAC;SACX;QAED,gEAAgE;QAChE,MAAM,UAAU,GAAG,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE;YAC5B,OAAO,CAAC,IAAI,CACV,kBAAkB,IAAI,CAAC,MAAM,yBAAyB,UAAU,EAAE,CACnE,CAAC;YACF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;SAClC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE;gBACjD,MAAM,SAAS,GAAQ,EAAE,CAAC;gBAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;oBACjD,2DAA2D;oBAC3D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;oBACpD,IAAI,YAAY,KAAK,GAAG,EAAE;wBACxB,OAAO,CAAC,IAAI,CAAC,0BAA0B,GAAG,OAAO,YAAY,EAAE,CAAC,CAAC;qBAClE;oBACD,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;iBACjC;gBACD,OAAO,SAAS,CAAC;aAClB;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,MAAW;QACnB,IAAI;YACF,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEvC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE;gBACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;aACtE;YAED,yCAAyC;YACzC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;gBACvB,OAAO,CAAC,IAAI,CACV,yCAAyC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CACtE,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,+BAA+B,UAAU,CAAC,KAAK,EAAE;oBAC1D,KAAK,EAAE,4BAA4B;iBACpC,CAAC;aACH;YAED,iFAAiF;YACjF,OAAO,CAAC,GAAG,CACT,qCAAqC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjG,CAAC;YAEF,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,sBAAsB;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE5D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,0CAA0C,aAAa,CAAC,MAAM,aACrE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;oBAC9C,CAAC,CAAC,kBAAkB,MAAM,CAAC,SAAS,CAAC,MAAM,iBAAiB;oBAC5D,CAAC,CAAC,EACN,EAAE;gBACF,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,aAAa,CAAC,MAAM;gBACjC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;aACtC,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAE/C,qEAAqE;YACrE,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;YACpE,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBACnE,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,iCAAiC,CAAC;YAEtC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,4BAA4B,gBAAgB,EAAE;gBACvD,KAAK,EAAE,wBAAwB;aAChC,CAAC;SACH;IACH,CAAC;CACF"}
+{"version":3,"file":"ReadDataTool.js","sourceRoot":"","sources":["../../src/tools/ReadDataTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAOrD,MAAM,OAAO,YAAY;IAAzB;QACE,SAAI,GAAG,WAAW,CAAC;QACnB,gBAAW,GACT,8JAA8J,CAAC;IAwGnK,CAAC;IAtGC;;;;OAIG;IACK,cAAc,CAAC,IAAe;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,gEAAgE;QAChE,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,kBAAkB,IAAI,CAAC,MAAM,yBAAyB,UAAU,EAAE,CACnE,CAAC;YACF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAClD,MAAM,SAAS,GAA4B,EAAE,CAAC;gBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,2DAA2D;oBAC3D,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;oBACpD,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;wBACzB,OAAO,CAAC,IAAI,CAAC,0BAA0B,GAAG,OAAO,YAAY,EAAE,CAAC,CAAC;oBACnE,CAAC;oBACD,SAAS,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC;gBAClC,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,MAAsB;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEvC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YACvE,CAAC;YAED,yCAAyC;YACzC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CACV,yCAAyC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CACtE,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,+BAA+B,UAAU,CAAC,KAAK,EAAE;oBAC1D,KAAK,EAAE,4BAA4B;iBACpC,CAAC;YACJ,CAAC;YAED,iFAAiF;YACjF,OAAO,CAAC,GAAG,CACT,qCAAqC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjG,CAAC;YAEF,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,sBAAsB;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE5D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,0CAA0C,aAAa,CAAC,MAAM,aACrE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;oBAC9C,CAAC,CAAC,kBAAkB,MAAM,CAAC,SAAS,CAAC,MAAM,iBAAiB;oBAC5D,CAAC,CAAC,EACN,EAAE;gBACF,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,aAAa,CAAC,MAAM;gBACjC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;aACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAE/C,qEAAqE;YACrE,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;YACpE,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBACnE,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,iCAAiC,CAAC;YAEtC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,4BAA4B,gBAAgB,EAAE;gBACvD,KAAK,EAAE,wBAAwB;aAChC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/SearchDataTool.d.ts

@@ -0,0 +1,27 @@
+interface SearchDataParams {
+    tableName: string;
+    schemaName?: string;
+    columns: string[];
+    searchTerm: string;
+    limit?: number;
+    databaseName?: string;
+}
+export declare class SearchDataTool {
+    name: string;
+    description: string;
+    run(params: SearchDataParams): Promise<{
+        success: boolean;
+        message: string;
+        data?: undefined;
+        recordCount?: undefined;
+        limit?: undefined;
+    } | {
+        success: boolean;
+        message: string;
+        data: import("mssql").IRecordSet<any>;
+        recordCount: number;
+        limit: number;
+    }>;
+}
+export {};
+//# sourceMappingURL=SearchDataTool.d.ts.map

package/dist/tools/SearchDataTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchDataTool.d.ts","sourceRoot":"","sources":["../../src/tools/SearchDataTool.ts"],"names":[],"mappings":"AAIA,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,cAAc;IACzB,IAAI,SAAiB;IACrB,WAAW,SACsF;IAE3F,GAAG,CAAC,MAAM,EAAE,gBAAgB;;;;;;;;;;;;;CA+DnC"}

package/dist/tools/SearchDataTool.js

@@ -0,0 +1,61 @@
+import { clampRowLimit, getDefaultSearchLimit } from "../config.js";
+import { getSqlRequest } from "../db.js";
+import { buildQualifiedName, quoteIdentifier } from "../sql.js";
+export class SearchDataTool {
+    constructor() {
+        this.name = "search_data";
+        this.description = "Searches rows in a table by applying a parameterized LIKE filter across one or more columns.";
+    }
+    async run(params) {
+        try {
+            const { tableName, schemaName, columns, searchTerm, limit, databaseName, } = params;
+            if (!Array.isArray(columns) || columns.length === 0) {
+                return {
+                    success: false,
+                    message: "The 'columns' field must be a non-empty array.",
+                };
+            }
+            if (typeof searchTerm !== "string" || searchTerm.trim() === "") {
+                return {
+                    success: false,
+                    message: "The 'searchTerm' field must be a non-empty string.",
+                };
+            }
+            const { request, error } = await getSqlRequest(databaseName);
+            if (error) {
+                return { success: false, message: error };
+            }
+            const qualifiedTableName = buildQualifiedName(tableName, schemaName);
+            const safeColumns = columns.map((column) => quoteIdentifier(column));
+            const top = clampRowLimit(limit, getDefaultSearchLimit());
+            const whereClause = safeColumns
+                .map((columnName, index) => {
+                const parameterName = `search_${index}`;
+                request.input(parameterName, `%${searchTerm.trim()}%`);
+                return `${columnName} LIKE @${parameterName}`;
+            })
+                .join(" OR ");
+            const query = `
+        SELECT TOP (${top}) *
+        FROM ${qualifiedTableName}
+        WHERE ${whereClause}
+      `;
+            const result = await request.query(query);
+            return {
+                success: true,
+                message: `Search completed successfully. Retrieved ${result.recordset.length} row(s).`,
+                data: result.recordset,
+                recordCount: result.recordset.length,
+                limit: top,
+            };
+        }
+        catch (error) {
+            console.error("Error searching data:", error);
+            return {
+                success: false,
+                message: `Failed to search data: ${error}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=SearchDataTool.js.map

package/dist/tools/SearchDataTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchDataTool.js","sourceRoot":"","sources":["../../src/tools/SearchDataTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAWhE,MAAM,OAAO,cAAc;IAA3B;QACE,SAAI,GAAG,aAAa,CAAC;QACrB,gBAAW,GACT,8FAA8F,CAAC;IAiEnG,CAAC;IA/DC,KAAK,CAAC,GAAG,CAAC,MAAwB;QAChC,IAAI,CAAC;YACH,MAAM,EACJ,SAAS,EACT,UAAU,EACV,OAAO,EACP,UAAU,EACV,KAAK,EACL,YAAY,GACb,GAAG,MAAM,CAAC;YAEX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,gDAAgD;iBAC1D,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC/D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,oDAAoD;iBAC9D,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YACrE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,WAAW;iBAC5B,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;gBACzB,MAAM,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;gBACxC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACvD,OAAO,GAAG,UAAU,UAAU,aAAa,EAAE,CAAC;YAChD,CAAC,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,CAAC;YAEhB,MAAM,KAAK,GAAG;sBACE,GAAG;eACV,kBAAkB;gBACjB,WAAW;OACpB,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,4CAA4C,MAAM,CAAC,SAAS,CAAC,MAAM,UAAU;gBACtF,IAAI,EAAE,MAAM,CAAC,SAAS;gBACtB,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;gBACpC,KAAK,EAAE,GAAG;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,0BAA0B,KAAK,EAAE;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/UpdateDataTool.d.ts

@@ -1,17 +1,22 @@
-import { Tool } from "@modelcontextprotocol/sdk/types.js";
-export declare class UpdateDataTool implements Tool {
-    [key: string]: any;
-    name: string;
-    description: string;
-    inputSchema: any;
-    run(params: any): Promise<{
-        success: boolean;
-        message: string;
-        rowsAffected?: undefined;
-    } | {
-        success: boolean;
-        message: string;
-        rowsAffected: number;
-    }>;
-}
+import { type SqlFilter } from "../writeSafety.js";
+interface UpdateDataParams {
+    tableName: string;
+    updates: Record<string, unknown>;
+    filters: SqlFilter[];
+    databaseName?: string;
+}
+export declare class UpdateDataTool {
+    name: string;
+    description: string;
+    run(params: UpdateDataParams): Promise<{
+        success: boolean;
+        message: string;
+        rowsAffected?: undefined;
+    } | {
+        success: boolean;
+        message: string;
+        rowsAffected: number;
+    }>;
+}
+export {};
 //# sourceMappingURL=UpdateDataTool.d.ts.map

package/dist/tools/UpdateDataTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateDataTool.d.ts","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAG1D,qBAAa,cAAe,YAAW,IAAI;IACzC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IACnB,IAAI,SAAiB;IACrB,WAAW,SACuG;IAClH,WAAW,MAwBF;IAEH,GAAG,CAAC,MAAM,EAAE,GAAG;;;;;;;;;CAwCtB"}
+{"version":3,"file":"UpdateDataTool.d.ts","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAElF,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,cAAc;IACzB,IAAI,SAAiB;IACrB,WAAW,SACoE;IAEzE,GAAG,CAAC,MAAM,EAAE,gBAAgB;;;;;;;;;CA6CnC"}

package/dist/tools/UpdateDataTool.js

@@ -1,66 +1,46 @@
-import { getSqlRequest } from "../db.js";
-export class UpdateDataTool {
-    constructor() {
-        this.name = "update_data";
-        this.description = "Updates data in an MSSQL Database table using a WHERE clause. The WHERE clause must be provided for security.";
-        this.inputSchema = {
-            type: "object",
-            properties: {
-                tableName: {
-                    type: "string",
-                    description: "Name of the table to update",
-                },
-                updates: {
-                    type: "object",
-                    description: "Key-value pairs of columns to update. Example: { 'status': 'active', 'last_updated': '2025-01-01' }",
-                },
-                whereClause: {
-                    type: "string",
-                    description: "WHERE clause to identify which records to update. Example: \"genre = 'comedy' AND created_date <= '2025-07-05'\"",
-                },
-                databaseName: {
-                    type: "string",
-                    description: "Name of the database to use (optional). Omit to use the default configured database.",
-                },
-            },
-            required: ["tableName", "updates", "whereClause"],
-        };
-    }
-    async run(params) {
-        let query;
-        try {
-            const { tableName, updates, whereClause, databaseName } = params;
-            const { request, error } = await getSqlRequest(databaseName);
-            if (error) {
-                return { success: false, message: error };
-            }
-            // Basic validation: ensure whereClause is not empty
-            if (!whereClause || whereClause.trim() === "") {
-                throw new Error("WHERE clause is required for security reasons");
-            }
-            // Build SET clause with parameterized queries for security
-            const setClause = Object.keys(updates)
-                .map((key, index) => {
-                const paramName = `update_${index}`;
-                request.input(paramName, updates[key]);
-                return `[${key}] = @${paramName}`;
-            })
-                .join(", ");
-            query = `UPDATE ${tableName} SET ${setClause} WHERE ${whereClause}`;
-            const result = await request.query(query);
-            return {
-                success: true,
-                message: `Update completed successfully. ${result.rowsAffected[0]} row(s) affected`,
-                rowsAffected: result.rowsAffected[0],
-            };
-        }
-        catch (error) {
-            console.error("Error updating data:", error);
-            return {
-                success: false,
-                message: `Failed to update data ${query ? ` with '${query}'` : ""}: ${error}`,
-            };
-        }
-    }
-}
+import { getSqlRequest } from "../db.js";
+import { buildQualifiedName, quoteIdentifier } from "../sql.js";
+import { buildParameterizedWhereClause } from "../writeSafety.js";
+export class UpdateDataTool {
+    constructor() {
+        this.name = "update_data";
+        this.description = "Updates data in an MSSQL Database table using required structured filters.";
+    }
+    async run(params) {
+        let query;
+        try {
+            const { tableName, updates, filters, databaseName } = params;
+            const { request, error } = await getSqlRequest(databaseName);
+            if (error) {
+                return { success: false, message: error };
+            }
+            const updateColumns = Object.keys(updates);
+            if (updateColumns.length === 0) {
+                throw new Error("At least one column update is required.");
+            }
+            const setClause = updateColumns
+                .map((key, index) => {
+                const paramName = `update_${index}`;
+                request.input(paramName, updates[key]);
+                return `${quoteIdentifier(key)} = @${paramName}`;
+            })
+                .join(", ");
+            const whereClause = buildParameterizedWhereClause(filters, (name, value) => request.input(name, value), "update_filter");
+            query = `UPDATE ${buildQualifiedName(tableName)} SET ${setClause} WHERE ${whereClause}`;
+            const result = await request.query(query);
+            return {
+                success: true,
+                message: `Update completed successfully. ${result.rowsAffected[0]} row(s) affected`,
+                rowsAffected: result.rowsAffected[0],
+            };
+        }
+        catch (error) {
+            console.error("Error updating data:", error);
+            return {
+                success: false,
+                message: `Failed to update data ${query ? ` with '${query}'` : ""}: ${error}`,
+            };
+        }
+    }
+}
 //# sourceMappingURL=UpdateDataTool.js.map

package/dist/tools/UpdateDataTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"UpdateDataTool.js","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,OAAO,cAAc;IAA3B;QAEE,SAAI,GAAG,aAAa,CAAC;QACrB,gBAAW,GACT,+GAA+G,CAAC;QAClH,gBAAW,GAAG;YACZ,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6BAA6B;iBAC3C;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,qGAAqG;iBACxG;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,kHAAkH;iBACrH;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,sFAAsF;iBACzF;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;SAC3C,CAAC;IA0CX,CAAC;IAxCC,KAAK,CAAC,GAAG,CAAC,MAAW;QACnB,IAAI,KAAyB,CAAC;QAC9B,IAAI;YACF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAEjE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE;gBACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;aAC3C;YAED,oDAAoD;YACpD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aAClE;YAED,2DAA2D;YAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;iBACnC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAClB,MAAM,SAAS,GAAG,UAAU,KAAK,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvC,OAAO,IAAI,GAAG,QAAQ,SAAS,EAAE,CAAC;YACpC,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,KAAK,GAAG,UAAU,SAAS,QAAQ,SAAS,UAAU,WAAW,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,kCAAkC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;gBACnF,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;aACrC,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yBAAyB,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE;aAC9E,CAAC;SACH;IACH,CAAC;CACF"}
+{"version":3,"file":"UpdateDataTool.js","sourceRoot":"","sources":["../../src/tools/UpdateDataTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,6BAA6B,EAAkB,MAAM,mBAAmB,CAAC;AASlF,MAAM,OAAO,cAAc;IAA3B;QACE,SAAI,GAAG,aAAa,CAAC;QACrB,gBAAW,GACT,4EAA4E,CAAC;IA+CjF,CAAC;IA7CC,KAAK,CAAC,GAAG,CAAC,MAAwB;QAChC,IAAI,KAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;YAE7D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5C,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,SAAS,GAAG,aAAa;iBAC5B,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;gBAClB,MAAM,SAAS,GAAG,UAAU,KAAK,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvC,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,SAAS,EAAE,CAAC;YACnD,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,WAAW,GAAG,6BAA6B,CAC/C,OAAO,EACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAC3C,eAAe,CAChB,CAAC;YAEF,KAAK,GAAG,UAAU,kBAAkB,CAAC,SAAS,CAAC,QAAQ,SAAS,UAAU,WAAW,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,kCAAkC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;gBACnF,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,yBAAyB,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/validation.d.ts

@@ -1,14 +1,14 @@
-/**
- * SQL query validation for read-only operations.
- * Extracted for testability and reuse.
- */
-export interface ValidationResult {
-    isValid: boolean;
-    error?: string;
-}
-/**
- * Validates a SQL query for read-only (SELECT) operations.
- * Rejects dangerous keywords, injection patterns, and multi-statement queries.
- */
-export declare function validateReadQuery(query: string): ValidationResult;
+/**
+ * SQL query validation for read-only operations.
+ * Extracted for testability and reuse.
+ */
+export interface ValidationResult {
+    isValid: boolean;
+    error?: string;
+}
+/**
+ * Validates a SQL query for read-only (SELECT) operations.
+ * Rejects dangerous keywords, injection patterns, and multi-statement queries.
+ */
+export declare function validateReadQuery(query: string): ValidationResult;
 //# sourceMappingURL=validation.d.ts.map