@tellaro/tql 0.1.14 → 0.1.15

package/dist/src/completionProvider.js

@@ -108,68 +108,167 @@ const E = [
     category: "Stats"
   }
 ], U = {
-  eq: { detail: "Equals", documentation: "Exact match comparison" },
-  ne: { detail: "Not equals", documentation: "Match any value except this one" },
-  gt: { detail: "Greater than", documentation: "Numeric/date comparison" },
-  gte: { detail: "Greater than or equal", documentation: "Numeric/date comparison" },
-  lt: { detail: "Less than", documentation: "Numeric/date comparison" },
-  lte: { detail: "Less than or equal", documentation: "Numeric/date comparison" },
-  contains: { detail: "Contains substring", documentation: "Case-insensitive substring match" },
-  not_contains: { detail: "Does not contain", documentation: "Negative substring match" },
-  startswith: { detail: "Starts with", documentation: "Match prefix of field value" },
-  not_startswith: { detail: "Does not start with", documentation: "Negative prefix match" },
-  endswith: { detail: "Ends with", documentation: "Match suffix of field value" },
-  not_endswith: { detail: "Does not end with", documentation: "Negative suffix match" },
-  regexp: { detail: "Regular expression", documentation: "Match using regex pattern" },
-  regex: { detail: "Regular expression", documentation: "Alias for regexp" },
-  not_regexp: { detail: "Not matching regex", documentation: "Negative regex match" },
-  matches: { detail: "Pattern match", documentation: "Match using pattern" },
-  not_matches: { detail: "Not matching pattern", documentation: "Negative pattern match" },
-  between: { detail: "Between range", documentation: "Usage: field between A AND B" },
-  not_between: { detail: "Not between range", documentation: "Exclude values in range" },
-  in: { detail: "In list", documentation: 'Usage: field in ["a", "b", "c"]' },
-  not_in: { detail: "Not in list", documentation: "Exclude values in list" },
-  exists: { detail: "Field exists", documentation: "Check if field has any value" },
-  not_exists: { detail: "Field not exists", documentation: "Check if field is missing or null" },
-  is: { detail: "Is null check", documentation: "Usage: field is null" },
-  is_not: { detail: "Is not null check", documentation: "Usage: field is_not null" },
-  cidr: { detail: "CIDR match", documentation: "Match IP addresses in CIDR range (IP fields only)" },
-  not_cidr: { detail: "Not in CIDR", documentation: "Exclude IPs in CIDR range" },
-  any: { detail: "Any element matches", documentation: "True if any array element matches" },
-  all: { detail: "All elements match", documentation: "True if all array elements match" },
-  none: { detail: "No elements match", documentation: "True if no array elements match" },
-  not_any: { detail: "Not any matches", documentation: "Negation of any" },
-  not_all: { detail: "Not all match", documentation: "Negation of all" },
-  not_none: { detail: "Not none match", documentation: "Negation of none" }
+  // Equality operators
+  eq: { detail: "Equals", documentation: "Exact match comparison. Case-sensitive for strings.\n\nExamples:\n- status eq 'active'\n- severity eq 3\n- enabled eq true\n\nWorks with: strings, numbers, booleans, dates, IPs" },
+  ne: { detail: "Not equals", documentation: "Match any value except the specified one.\n\nExamples:\n- status ne 'error'\n- severity ne 0\n\nUseful for filtering out specific values." },
+  // Comparison operators
+  gt: { detail: "Greater than", documentation: "Compare if field value is greater than the specified value.\n\nExamples:\n- severity gt 3\n- bytes gt 1000000\n- @timestamp gt '2024-01-01'\n\nWorks with: numbers, dates" },
+  gte: { detail: "Greater than or equal", documentation: "Compare if field value is greater than or equal to the specified value.\n\nExamples:\n- risk_score gte 70\n- attempts gte 5\n\nWorks with: numbers, dates" },
+  lt: { detail: "Less than", documentation: "Compare if field value is less than the specified value.\n\nExamples:\n- response_time lt 100\n- @timestamp lt 'now-1d'\n\nWorks with: numbers, dates" },
+  lte: { detail: "Less than or equal", documentation: "Compare if field value is less than or equal to the specified value.\n\nExamples:\n- confidence lte 50\n- age lte 30\n\nWorks with: numbers, dates" },
+  // String operators
+  contains: { detail: "Contains substring", documentation: "Check if field contains the specified substring. Case-insensitive.\n\nExamples:\n- message contains 'error'\n- url contains 'admin'\n\nUseful for searching within text fields." },
+  not_contains: { detail: "Does not contain", documentation: "Check if field does NOT contain the specified substring.\n\nExamples:\n- message not_contains 'debug'\n- path not_contains 'test'\n\nUseful for excluding noise from results." },
+  startswith: { detail: "Starts with", documentation: "Check if field value starts with the specified prefix.\n\nExamples:\n- hostname startswith 'web-'\n- url startswith 'https://'\n\nFaster than contains for prefix matching." },
+  not_startswith: { detail: "Does not start with", documentation: "Check if field value does NOT start with the specified prefix.\n\nExamples:\n- hostname not_startswith 'test-'\n- email not_startswith 'noreply'" },
+  endswith: { detail: "Ends with", documentation: "Check if field value ends with the specified suffix.\n\nExamples:\n- file.name endswith '.exe'\n- email endswith '@company.com'\n\nUseful for file extension matching." },
+  not_endswith: { detail: "Does not end with", documentation: "Check if field value does NOT end with the specified suffix.\n\nExamples:\n- file.name not_endswith '.log'\n- url not_endswith '.jpg'" },
+  regexp: { detail: "Regular expression", documentation: "Match field value against a regular expression pattern.\n\nExamples:\n- ip regexp '^192\\\\.168\\\\..*'\n- email regexp '.*@(gmail|yahoo)\\\\.com$'\n\nUses standard regex syntax." },
+  regex: { detail: "Regular expression", documentation: "Alias for regexp. Match using regex pattern.\n\nExamples:\n- user.name regex '^admin.*'" },
+  not_regexp: { detail: "Not matching regex", documentation: "Match if field value does NOT match the regex.\n\nExamples:\n- file.path not_regexp '.*\\\\.tmp$'\n- message not_regexp 'DEBUG|TRACE'" },
+  matches: { detail: "Pattern match", documentation: "Alias for regexp. Match using regex pattern.\n\nExamples:\n- hostname matches 'server[0-9]+'" },
+  not_matches: { detail: "Not matching pattern", documentation: "Alias for not_regexp. Does NOT match the pattern." },
+  // Range operators
+  between: { detail: "Between range", documentation: "Check if field value is within a range (inclusive).\n\nExamples:\n- port between 1024 AND 65535\n- severity between 1 AND 5\n\nIncludes both boundary values." },
+  not_between: { detail: "Not between range", documentation: "Check if field value is outside a range.\n\nExamples:\n- port not_between 80 AND 443\n\nExcludes values in the range." },
+  // List operators
+  in: { detail: "In list", documentation: "Check if field value matches any value in the list.\n\nExamples:\n- status in ['active', 'pending']\n- severity in [3, 4, 5]\n\nMore efficient than multiple OR conditions." },
+  not_in: { detail: "Not in list", documentation: "Check if field value does NOT match any value in the list.\n\nExamples:\n- status not_in ['deleted', 'archived']\n\nUseful for exclusion lists." },
+  // Existence operators
+  exists: { detail: "Field exists", documentation: "Check if field exists and has a non-null value.\n\nExamples:\n- user.email exists\n- threat.indicator exists\n\nReturns false for null values or missing fields." },
+  not_exists: { detail: "Field not exists", documentation: "Check if field is missing or has a null value.\n\nExamples:\n- error.code not_exists\n\nTrue when field is missing or explicitly null." },
+  is: { detail: "Is null check", documentation: "Check if field value is explicitly null.\n\nExamples:\n- user.phone is null\n\nDifferent from not_exists: returns false for missing fields." },
+  is_not: { detail: "Is not null check", documentation: "Check if field exists and is not null.\n\nExamples:\n- user.email is_not null\n\nField must exist and have a non-null value." },
+  // Network operators
+  cidr: { detail: "CIDR match", documentation: "Match IP addresses within a CIDR range.\n\nExamples:\n- source.ip cidr '192.168.0.0/16'\n- destination.ip cidr '10.0.0.0/8'\n\nWorks with IPv4 and IPv6." },
+  not_cidr: { detail: "Not in CIDR", documentation: "Match IP addresses NOT within a CIDR range.\n\nExamples:\n- source.ip not_cidr '192.168.0.0/16'\n\nUseful for identifying external IPs." },
+  // Collection operators
+  any: { detail: "Any element matches", documentation: "True if ANY element in an array matches the condition.\n\nExamples:\n- tags any eq 'critical'\n- ports any between 1 AND 1024\n\nUseful for searching within array fields." },
+  all: { detail: "All elements match", documentation: "True if ALL elements in an array match the condition.\n\nExamples:\n- scores all gte 70\n\nUseful for validation across arrays." },
+  none: { detail: "No elements match", documentation: "True if NO elements in an array match the condition.\n\nExamples:\n- tags none eq 'deprecated'\n\nUseful for ensuring no bad values exist." },
+  not_any: { detail: "Not any matches", documentation: "Negation of any - equivalent to none.\n\nTrue when no elements match." },
+  not_all: { detail: "Not all match", documentation: "Negation of all - at least one element doesn't match.\n\nTrue when at least one element fails." },
+  not_none: { detail: "Not none match", documentation: "Negation of none - equivalent to any.\n\nTrue when at least one element matches." }
 }, z = {
-  lowercase: { detail: "Convert to lowercase", documentation: "Transform string to lowercase" },
-  uppercase: { detail: "Convert to uppercase", documentation: "Transform string to uppercase" },
-  trim: { detail: "Trim whitespace", documentation: "Remove leading/trailing whitespace" },
-  split: { detail: "Split string", documentation: "Split string into array. Usage: split(delimiter)" },
-  length: { detail: "Get length", documentation: "Returns string/array length as number" },
-  replace: { detail: "Replace text", documentation: "Replace substring. Usage: replace(find, replace)" },
-  b64encode: { detail: "Base64 encode", documentation: "Encode value to Base64" },
-  b64decode: { detail: "Base64 decode", documentation: "Decode Base64 to string" },
-  urldecode: { detail: "URL decode", documentation: "Decode URL-encoded string" },
-  hexencode: { detail: "Hex encode", documentation: "Encode to hexadecimal" },
-  hexdecode: { detail: "Hex decode", documentation: "Decode from hexadecimal" },
-  md5: { detail: "MD5 hash", documentation: "Calculate MD5 hash" },
-  sha256: { detail: "SHA256 hash", documentation: "Calculate SHA256 hash" },
-  refang: { detail: "Refang IOC", documentation: "Convert defanged URL/IP to normal form" },
-  defang: { detail: "Defang IOC", documentation: "Convert URL/IP to safe defanged form" },
-  is_private: { detail: "Is private IP", documentation: "Check if IP is RFC1918/private" },
-  is_global: { detail: "Is global IP", documentation: "Check if IP is globally routable" },
-  nslookup: { detail: "DNS lookup", documentation: "Perform DNS lookup on hostname/IP" },
-  geoip_lookup: { detail: "GeoIP lookup", documentation: "Get geolocation data for IP" },
-  geoip: { detail: "GeoIP lookup", documentation: "Alias for geoip_lookup" },
-  geo: { detail: "GeoIP lookup", documentation: "Alias for geoip_lookup with conditions" },
-  any: { detail: "Any truthy", documentation: "True if any array element is truthy" },
-  all: { detail: "All truthy", documentation: "True if all array elements are truthy" },
-  avg: { detail: "Average", documentation: "Calculate average of numeric array" },
-  average: { detail: "Average", documentation: "Alias for avg" },
-  sum: { detail: "Sum", documentation: "Sum of numeric array elements" },
-  min: { detail: "Minimum", documentation: "Minimum value in array" },
-  max: { detail: "Maximum", documentation: "Maximum value in array" }
+  // String mutators
+  lowercase: {
+    detail: "Convert to lowercase",
+    documentation: "Transforms the field value to lowercase.\n\nExample: hostname | lowercase eq 'server01'\n\nUseful for case-insensitive comparisons."
+  },
+  uppercase: {
+    detail: "Convert to uppercase",
+    documentation: "Transforms the field value to uppercase.\n\nExample: status | uppercase eq 'ERROR'\n\nUseful for normalizing status codes."
+  },
+  trim: {
+    detail: "Trim whitespace",
+    documentation: "Removes leading and trailing whitespace from the field value.\n\nExample: message | trim contains 'error'\n\nUseful for cleaning user input or log messages."
+  },
+  split: {
+    detail: "Split string into array",
+    documentation: "Splits a string into an array using a delimiter.\n\nExample: tags | split(delimiter=',') any eq 'critical'\n\nParameters:\n- delimiter: Character(s) to split on (default: ',')\n- field: Field name to save results to"
+  },
+  length: {
+    detail: "Get string/array length",
+    documentation: "Returns the length of a string or array as a number.\n\nExample: password | length gte 8\n\nUseful for validation checks."
+  },
+  replace: {
+    detail: "Replace text in string",
+    documentation: "Replaces occurrences of a substring with another string.\n\nExample: url | replace(find='http://', replace='https://') startswith 'https'\n\nParameters:\n- find: Text to search for (required)\n- replace: Text to replace with (required)\n- field: Field name to save results to"
+  },
+  // Encoding mutators
+  b64encode: {
+    detail: "Base64 encode",
+    documentation: "Encodes the field value to Base64.\n\nExample: payload | b64encode eq 'SGVsbG8gV29ybGQ='\n\nParameters:\n- field: Field name to save encoded result"
+  },
+  b64decode: {
+    detail: "Base64 decode",
+    documentation: "Decodes a Base64-encoded field value.\n\nExample: encoded_data | b64decode contains 'password'\n\nParameters:\n- field: Field name to save decoded result"
+  },
+  urldecode: {
+    detail: "URL decode",
+    documentation: "Decodes URL-encoded (percent-encoded) strings.\n\nExample: query_string | urldecode contains 'SELECT'\n\nUseful for analyzing web requests."
+  },
+  hexencode: {
+    detail: "Hex encode",
+    documentation: "Encodes the field value to hexadecimal.\n\nExample: data | hexencode eq '48656c6c6f'\n\nParameters:\n- field: Field name to save encoded result"
+  },
+  hexdecode: {
+    detail: "Hex decode",
+    documentation: "Decodes a hexadecimal-encoded field value.\n\nExample: hex_payload | hexdecode contains 'malware'\n\nParameters:\n- field: Field name to save decoded result"
+  },
+  md5: {
+    detail: "MD5 hash",
+    documentation: "Calculates the MD5 hash of the field value.\n\nExample: file_content | md5 eq 'd41d8cd98f00b204e9800998ecf8427e'\n\nUseful for file integrity checks."
+  },
+  sha256: {
+    detail: "SHA256 hash",
+    documentation: "Calculates the SHA256 hash of the field value.\n\nExample: file_content | sha256 in ['hash1', 'hash2']\n\nUseful for malware signature matching."
+  },
+  // Security mutators
+  refang: {
+    detail: "Refang IOC",
+    documentation: "Converts defanged indicators back to their original form.\n\nExample: ioc | refang eq '192.168.1.1'\n\nConverts 'hxxp://evil[.]com' to 'http://evil.com'"
+  },
+  defang: {
+    detail: "Defang IOC",
+    documentation: "Converts URLs/IPs to a safe defanged form for sharing.\n\nExample: url | defang\n\nConverts 'http://evil.com' to 'hxxp://evil[.]com'"
+  },
+  // Network mutators
+  is_private: {
+    detail: "Check if IP is private",
+    documentation: "Returns true if the IP address is in a private range (RFC1918).\n\nExample: source.ip | is_private eq true\n\nPrivate ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16"
+  },
+  is_global: {
+    detail: "Check if IP is globally routable",
+    documentation: "Returns true if the IP address is globally routable (not private/reserved).\n\nExample: destination.ip | is_global eq true\n\nUseful for filtering external connections."
+  },
+  // DNS mutator
+  nslookup: {
+    detail: "DNS lookup",
+    documentation: "Performs DNS lookup on a hostname or reverse lookup on an IP.\n\nExample: hostname | nslookup(types=['A', 'AAAA'])\n\nParameters:\n- servers: DNS servers to query (e.g., ['1.1.1.1'])\n- types: Record types to query (A, AAAA, MX, TXT, etc.)\n- force: Force lookup even if data exists\n- save: Save results to record\n- field: Field name to save results"
+  },
+  // GeoIP mutators
+  geoip_lookup: {
+    detail: "GeoIP enrichment",
+    documentation: "Enriches IP address with geolocation data (country, city, ASN, etc.).\n\nExample: source.ip | geoip_lookup(force=true)\n\nParameters:\n- db_path: Path to MaxMind database\n- force: Force lookup even if geo data exists\n- save: Save results to record\n- cache: Enable result caching\n- cache_ttl: Cache TTL in seconds"
+  },
+  geoip: {
+    detail: "GeoIP enrichment",
+    documentation: "Alias for geoip_lookup. Enriches IP with geolocation data.\n\nExample: destination.ip | geoip"
+  },
+  geo: {
+    detail: "GeoIP enrichment",
+    documentation: "Alias for geoip_lookup. Enriches IP with geolocation data.\n\nExample: source.ip | geo(save=true)\n\nAdds: country, city, region, coordinates, ASN info"
+  },
+  // List mutators
+  any: {
+    detail: "Any element matches",
+    documentation: "Returns true if any element in an array matches the condition.\n\nExample: tags | any eq 'critical'\n\nUseful for checking array fields."
+  },
+  all: {
+    detail: "All elements match",
+    documentation: "Returns true if all elements in an array match the condition.\n\nExample: scores | all gte 70\n\nUseful for validation across arrays."
+  },
+  avg: {
+    detail: "Average of array",
+    documentation: "Calculates the average of numeric array elements.\n\nExample: response_times | avg lt 100\n\nUseful for performance analysis."
+  },
+  average: {
+    detail: "Average of array",
+    documentation: "Alias for avg. Calculates the average of numeric array elements."
+  },
+  sum: {
+    detail: "Sum of array",
+    documentation: "Calculates the sum of numeric array elements.\n\nExample: byte_counts | sum gt 1000000\n\nUseful for aggregate analysis."
+  },
+  min: {
+    detail: "Minimum value in array",
+    documentation: "Returns the minimum value from a numeric array.\n\nExample: temperatures | min lt 0\n\nUseful for threshold detection."
+  },
+  max: {
+    detail: "Maximum value in array",
+    documentation: "Returns the maximum value from a numeric array.\n\nExample: cpu_usage | max gt 90\n\nUseful for peak detection."
+  }
 }, h = {
   // String outputs
   lowercase: "keyword",
@@ -661,23 +760,33 @@ function W(e) {
   return D.filter((t) => !e || t.toLowerCase().includes(e.toLowerCase())).map(
     (t, a) => {
       const i = z[t] || { detail: "Field mutator", documentation: "" };
-      // Check if this is an enrichment mutator that supports parameters
-      const isEnrichment = ENRICHMENT_MUTATORS.includes(t);
+      // Check if this mutator has parameters defined
       const hasParams = MUTATOR_PARAMETERS[t] && MUTATOR_PARAMETERS[t].length > 0;
-      // Enrichment mutators with params get () inserted, cursor inside
-      // Enrichment mutators without params get () inserted, cursor after
-      // Regular mutators get no parens
+      const isEnrichment = ENRICHMENT_MUTATORS.includes(t);
+
+      // Build label and insertText
+      let label = t;
       let insertText = t;
-      if (isEnrichment && hasParams) {
+      let detail = i.detail;
+
+      if (hasParams) {
+        // Mutators with parameters show () in label and insert with cursor inside
+        label = `${t}()`;
         insertText = `${t}($1)`;
+        // Add param hint to detail
+        const paramNames = MUTATOR_PARAMETERS[t].map(p => p.name).join(", ");
+        detail = `${i.detail} - params: ${paramNames}`;
       } else if (isEnrichment) {
+        // Enrichment mutators without params still get () for consistency
+        label = `${t}()`;
         insertText = `${t}()`;
       }
+
       return {
-        label: t,
+        label: label,
         insertText: insertText,
         kind: "mutator",
-        detail: i.detail,
+        detail: detail,
         documentation: i.documentation,
         sortOrder: 60 + a
       };

package/dist/src/tokenizer.js

@@ -12,8 +12,62 @@ const ENRICHMENT_MUTATORS = [
 
 // Parameters available for mutators that support function call syntax
 // e.g., geo(force=true, save=true)
+// Synced with Python TQL ALLOWED_MUTATORS definition
 const MUTATOR_PARAMETERS = {
+  // String mutators
+  split: [
+    { name: "delimiter", type: "string", description: "Delimiter to split on (default: comma)" },
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  length: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  replace: [
+    { name: "find", type: "string", description: "Text to find (required)" },
+    { name: "replace", type: "string", description: "Text to replace with (required)" },
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  // Security mutators
+  refang: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  defang: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  // Encoding mutators
+  b64encode: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  b64decode: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  urldecode: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  hexencode: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  hexdecode: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  md5: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  sha256: [
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  // DNS mutator
+  nslookup: [
+    { name: "servers", type: "array", description: "DNS servers to query (e.g., ['1.1.1.1', '8.8.8.8'])" },
+    { name: "types", type: "array", description: "DNS record types to query (e.g., ['A', 'AAAA', 'MX'])" },
+    { name: "append_field", type: "string", description: "Field name to append results to" },
+    { name: "force", type: "boolean", description: "Force lookup even if DNS data already exists" },
+    { name: "save", type: "boolean", description: "Save results to the record" },
+    { name: "field", type: "string", description: "Field name to save results to" }
+  ],
+  // GeoIP mutators
   geo: [
+    { name: "db_path", type: "string", description: "Path to MaxMind GeoIP database" },
     { name: "force", type: "boolean", description: "Force lookup even if geo data already exists" },
     { name: "save", type: "boolean", description: "Save results to the record" },
     { name: "field", type: "string", description: "Field name to save results to" },
@@ -21,6 +75,7 @@ const MUTATOR_PARAMETERS = {
     { name: "cache_ttl", type: "number", description: "Cache TTL in seconds" }
   ],
   geoip: [
+    { name: "db_path", type: "string", description: "Path to MaxMind GeoIP database" },
     { name: "force", type: "boolean", description: "Force lookup even if geo data already exists" },
     { name: "save", type: "boolean", description: "Save results to the record" },
     { name: "field", type: "string", description: "Field name to save results to" },
@@ -28,23 +83,12 @@ const MUTATOR_PARAMETERS = {
     { name: "cache_ttl", type: "number", description: "Cache TTL in seconds" }
   ],
   geoip_lookup: [
+    { name: "db_path", type: "string", description: "Path to MaxMind GeoIP database" },
     { name: "force", type: "boolean", description: "Force lookup even if geo data already exists" },
     { name: "save", type: "boolean", description: "Save results to the record" },
     { name: "field", type: "string", description: "Field name to save results to" },
     { name: "cache", type: "boolean", description: "Enable caching of lookup results" },
     { name: "cache_ttl", type: "number", description: "Cache TTL in seconds" }
-  ],
-  nslookup: [
-    { name: "record_type", type: "string", description: "DNS record type (A, AAAA, MX, etc.)" },
-    { name: "cache", type: "boolean", description: "Enable caching of lookup results" },
-    { name: "cache_ttl", type: "number", description: "Cache TTL in seconds" }
-  ],
-  split: [
-    { name: "delimiter", type: "string", description: "Delimiter to split on (default: comma)" }
-  ],
-  replace: [
-    { name: "find", type: "string", description: "Text to find" },
-    { name: "replace", type: "string", description: "Text to replace with" }
   ]
 };
 const p = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tellaro/tql",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "description": "Tellaro Query Language (TQL) parser, validator, and autocomplete for JavaScript/TypeScript",
   "type": "module",
   "main": "./dist/index.js",