@superatomai/sdk-node 0.0.30 → 0.0.32

package/dist/index.mjs

@@ -4788,20 +4788,25 @@ ${JSON.stringify(tool.requiredFields || [], null, 2)}`;
       logCollector?.info("Generating text response with query execution capability...");
       const tools = [{
         name: "execute_query",
-        description: "Executes a SQL query against the database and returns the results. Use this when the user asks for data. If the query fails, you will receive the error and can retry with a corrected query.",
+        description: "Executes a parameterized SQL query against the database. CRITICAL: NEVER hardcode literal values in WHERE/HAVING conditions - ALWAYS use $paramName placeholders and pass actual values in params object.",
         input_schema: {
           type: "object",
           properties: {
-            query: {
+            sql: {
               type: "string",
-              description: "The SQL query to execute. Must be valid SQL syntax using table and column names from the schema."
+              description: "SQL query with $paramName placeholders for ALL literal values in WHERE/HAVING conditions. NEVER hardcode values like WHERE status = 'Delivered' - instead use WHERE status = $status. Table names, column names, and SQL keywords stay as-is."
+            },
+            params: {
+              type: "object",
+              description: 'REQUIRED when SQL has WHERE/HAVING conditions. Maps each $paramName placeholder (without $) to its actual value. Pattern: WHERE col = $name \u2192 params: { "name": "value" }. Every placeholder in SQL MUST have a corresponding entry here.',
+              additionalProperties: true
             },
             reasoning: {
               type: "string",
               description: "Brief explanation of what this query does and why it answers the user's question."
             }
           },
-          required: ["query"],
+          required: ["sql"],
           additionalProperties: false
         }
       }];
@@ -4896,14 +4901,18 @@ ${JSON.stringify(tool.requiredFields || [], null, 2)}`;
       } : void 0;
       const toolHandler = async (toolName, toolInput) => {
         if (toolName === "execute_query") {
-          let query = toolInput.query;
+          let sql = toolInput.sql;
+          const params = toolInput.params || {};
           const reasoning = toolInput.reasoning;
           const { ensureQueryLimit: ensureQueryLimit2 } = await Promise.resolve().then(() => (init_utils(), utils_exports));
-          query = ensureQueryLimit2(query, 32, 32);
-          const queryKey = query.toLowerCase().replace(/\s+/g, " ").trim();
+          sql = ensureQueryLimit2(sql, 32, 32);
+          const queryKey = sql.toLowerCase().replace(/\s+/g, " ").trim();
           const attempts = (queryAttempts.get(queryKey) || 0) + 1;
           queryAttempts.set(queryKey, attempts);
-          logger.info(`[${this.getProviderName()}] Executing query (attempt ${attempts}/${MAX_QUERY_ATTEMPTS}): ${query.substring(0, 100)}...`);
+          logger.info(`[${this.getProviderName()}] Executing query (attempt ${attempts}/${MAX_QUERY_ATTEMPTS}): ${sql.substring(0, 100)}...`);
+          if (Object.keys(params).length > 0) {
+            logger.info(`[${this.getProviderName()}] Query params: ${JSON.stringify(params)}`);
+          }
           if (reasoning) {
             logCollector?.info(`Query reasoning: ${reasoning}`);
           }
@@ -4925,6 +4934,8 @@ Please try rephrasing your question or simplifying your request.
           }
           try {
             if (wrappedStreamCallback) {
+              const paramsDisplay = Object.keys(params).length > 0 ? `
+**Parameters:** ${JSON.stringify(params)}` : "";
               if (attempts === 1) {
                 wrappedStreamCallback(`
 
@@ -4938,8 +4949,8 @@ Please try rephrasing your question or simplifying your request.
                 }
                 wrappedStreamCallback(`\u{1F4DD} **Generated SQL Query:**
 \`\`\`sql
-${query}
-\`\`\`
+${sql}
+\`\`\`${paramsDisplay}
 
 `);
                 wrappedStreamCallback(`\u26A1 **Executing query...**
@@ -4958,8 +4969,8 @@ ${query}
                 }
                 wrappedStreamCallback(`\u{1F4DD} **Corrected SQL Query:**
 \`\`\`sql
-${query}
-\`\`\`
+${sql}
+\`\`\`${paramsDisplay}
 
 `);
                 wrappedStreamCallback(`\u26A1 **Executing query...**
@@ -4969,13 +4980,14 @@ ${query}
             }
             logCollector?.logQuery(
               `Executing SQL query (attempt ${attempts})`,
-              query,
+              { sql, params },
               { reasoning, attempt: attempts }
             );
             if (!collections || !collections["database"] || !collections["database"]["execute"]) {
               throw new Error("Database collection not registered. Please register database.execute collection to execute queries.");
             }
-            const result2 = await collections["database"]["execute"]({ sql: query });
+            const queryPayload = Object.keys(params).length > 0 ? { sql: JSON.stringify({ sql, values: params }) } : { sql };
+            const result2 = await collections["database"]["execute"](queryPayload);
             const data = result2?.data || result2;
             const rowCount = result2?.count ?? (Array.isArray(data) ? data.length : "N/A");
             logger.info(`[${this.getProviderName()}] Query executed successfully, rows returned: ${rowCount}`);
@@ -7054,6 +7066,7 @@ async function handleGetAll(id, executeCollection, userManager, sendMessage, cli
         email: user.email,
         fullname: user.fullname,
         role: user.role,
+        userInfo: user.userInfo,
         createdAt: user.createdAt,
         updatedAt: user.updatedAt
       }));
@@ -7107,6 +7120,7 @@ async function handleGetOne(id, numericId, username, executeCollection, userMana
           email: result.data?.email,
           fullname: result.data?.fullname,
           role: result.data?.role,
+          userInfo: result.data?.userInfo,
           createdAt: result.data?.createdAt,
           updatedAt: result.data?.updatedAt
         };
@@ -7169,6 +7183,7 @@ async function handleQuery(id, filters, limit, sort, executeCollection, userMana
         email: user.email,
         fullname: user.fullname,
         role: user.role,
+        userInfo: user.userInfo,
         createdAt: user.createdAt,
         updatedAt: user.updatedAt
       }));
@@ -7192,6 +7207,7 @@ async function handleQuery(id, filters, limit, sort, executeCollection, userMana
     email: user.email,
     fullname: user.fullname,
     role: user.role,
+    userInfo: user.userInfo,
     wsIds: user.wsIds || []
   }));
   logger.info(`[FILE] Retrieved ${sanitizedUsers.length} users (all - no query filter)`);