mcp-server-db2i 2.0.0 → 2.2.0

package/dist/customTools/context.js

@@ -0,0 +1,35 @@
+/**
+ * Read business annotations loaded from YAML.
+ */
+import { getCustomTools } from './registry.js';
+/**
+ * Annotation for SCHEMA.TABLE, if one was loaded.
+ */
+export function annotationFor(schema, table) {
+    const key = `${schema.trim().toUpperCase()}.${table.trim().toUpperCase()}`;
+    return getCustomTools().annotations.find((annotation) => annotation.table === key);
+}
+/**
+ * Annotations matching an entity name, a table, or both. Empty filters return every annotation.
+ */
+export function filterAnnotations(filter) {
+    const entity = filter.entity?.trim().toLowerCase();
+    const table = filter.table?.trim().toUpperCase();
+    return getCustomTools().annotations.filter((annotation) => {
+        if (entity && annotation.entity?.toLowerCase() !== entity) {
+            return false;
+        }
+        if (table) {
+            if (table.includes('.')) {
+                return annotation.table === table;
+            }
+            return annotation.table.endsWith(`.${table}`);
+        }
+        return true;
+    });
+}
+export function getBusinessContextTool(input) {
+    const data = filterAnnotations(input);
+    return { success: true, data, count: data.length };
+}
+//# sourceMappingURL=context.js.map

package/dist/customTools/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/customTools/context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAW/C;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAa;IACzD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC3E,OAAO,cAAc,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA2C;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEjD,OAAO,cAAc,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE;QACxD,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,UAAU,CAAC,KAAK,KAAK,KAAK,CAAC;YACpC,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA0C;IAC/E,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/customTools/execute.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Run one business SQL tool on the read-only connection.
+ */
+import type { StoredTool } from './loader.js';
+export interface CustomToolQueryResult {
+    success: boolean;
+    data?: unknown[];
+    rowCount?: number;
+    error?: string;
+    violations?: string[];
+    limitApplied?: number;
+    [key: string]: unknown;
+}
+/**
+ * Bind the tool's parameters and run its statement.
+ * The row cap is the tool's maxRows, or the default query limit, and never above QUERY_MAX_LIMIT.
+ */
+export declare function executeCustomTool(tool: StoredTool, args: Record<string, unknown>, options?: {
+    sessionId?: string;
+    defaultSchema?: string;
+}): Promise<CustomToolQueryResult>;
+//# sourceMappingURL=execute.d.ts.map

package/dist/customTools/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/customTools/execute.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAU9C,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,OAAO,CAAC,qBAAqB,CAAC,CAkDhC"}

package/dist/customTools/execute.js

@@ -0,0 +1,134 @@
+/**
+ * Run one business SQL tool on the read-only connection.
+ */
+import { executeQuery } from '../db/connection.js';
+import { isParseStatementMissing, parseStatement } from '../db/sqlServices.js';
+import { applyQueryLimit, getAllowedSchemas, getQueryLimitConfig, isQueryParseCheckEnabled } from '../config.js';
+import { applySqlRowLimit } from '../tools/sqlLimit.js';
+import { createChildLogger } from '../utils/logger.js';
+import { checkQuerySchemas } from '../utils/security/schemaAllowlist.js';
+import { cacheParse, cachedParse } from './registry.js';
+import { formatSchemaIssues, inputSchemaFor } from './schema.js';
+const log = createChildLogger({ component: 'custom-tools' });
+/**
+ * Bind the tool's parameters and run its statement.
+ * The row cap is the tool's maxRows, or the default query limit, and never above QUERY_MAX_LIMIT.
+ */
+export async function executeCustomTool(tool, args, options = {}) {
+    const filled = applyDefaults(tool.parameters, args);
+    const parsed = inputSchemaFor(tool.parameters).safeParse(filled);
+    if (!parsed.success) {
+        return { success: false, error: formatSchemaIssues(parsed.error) };
+    }
+    const values = tool.placeholderNames.map((name) => bindValue(parsed.data[name]));
+    const allowedSchemas = getAllowedSchemas();
+    if (allowedSchemas) {
+        const schemaResult = checkQuerySchemas(tool.sql, {
+            allowed: allowedSchemas,
+            defaultSchema: options.defaultSchema,
+        });
+        if (!schemaResult.ok) {
+            return {
+                success: false,
+                error: `Schema allowlist rejected the query: ${schemaResult.violations.join('; ')}`,
+                violations: schemaResult.violations,
+            };
+        }
+    }
+    const parsedOk = await ensureParsed(tool, options.sessionId);
+    if (!parsedOk.ok) {
+        return {
+            success: false,
+            error: parsedOk.error,
+            ...(parsedOk.violations ? { violations: parsedOk.violations } : {}),
+        };
+    }
+    const effectiveLimit = applyQueryLimit(tool.maxRows, getQueryLimitConfig());
+    const limitedSql = applySqlRowLimit(tool.sql, effectiveLimit);
+    try {
+        const result = await executeQuery(limitedSql, values, options.sessionId);
+        const rows = result.rows.slice(0, effectiveLimit);
+        log.info({ tool: tool.name, rowCount: rows.length, effectiveLimit }, 'Custom tool executed');
+        return {
+            success: true,
+            data: rows,
+            rowCount: rows.length,
+            limitApplied: effectiveLimit,
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error occurred';
+        log.debug({ err: error, tool: tool.name }, 'Custom tool failed');
+        return { success: false, error: message };
+    }
+}
+function applyDefaults(parameters, args) {
+    const filled = { ...args };
+    for (const [name, param] of Object.entries(parameters)) {
+        if (filled[name] === undefined && param.default !== undefined) {
+            filled[name] = param.default;
+        }
+    }
+    return filled;
+}
+/**
+ * Boolean values bind as 1 and 0. Omitted optional values bind as NULL.
+ */
+function bindValue(value) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    if (value === true) {
+        return 1;
+    }
+    if (value === false) {
+        return 0;
+    }
+    return value;
+}
+async function ensureParsed(tool, sessionId) {
+    if (!isQueryParseCheckEnabled()) {
+        return { ok: true };
+    }
+    const cached = cachedParse(tool.name);
+    if (cached) {
+        return cached;
+    }
+    try {
+        const parsed = await parseStatement(tool.sql, sessionId);
+        const types = [
+            ...new Set(parsed.map((row) => row.statementType).filter((type) => Boolean(type))),
+        ];
+        let outcome;
+        if (parsed.length === 0 || types.length === 0 || types.some((type) => type !== 'QUERY')) {
+            const found = types.join(', ') || 'unknown';
+            outcome = {
+                ok: false,
+                error: parsed.length === 0
+                    ? 'The statement could not be parsed. Fix the SQL, or set QUERY_PARSE_CHECK=false to skip this check.'
+                    : `PARSE_STATEMENT rejected the statement (type: ${found}). Only queries are allowed.`,
+                violations: parsed.length === 0
+                    ? ['The statement could not be parsed.']
+                    : [`Statement type is ${found}.`],
+            };
+        }
+        else {
+            outcome = { ok: true };
+        }
+        cacheParse(tool.name, outcome);
+        return outcome;
+    }
+    catch (error) {
+        if (isParseStatementMissing(error)) {
+            const outcome = {
+                ok: false,
+                error: 'QSYS2.PARSE_STATEMENT is not available on this system. Set QUERY_PARSE_CHECK=false to run queries without this check.',
+            };
+            cacheParse(tool.name, outcome);
+            return outcome;
+        }
+        const message = error instanceof Error ? error.message : 'Unknown error occurred';
+        return { ok: false, error: message };
+    }
+}
+//# sourceMappingURL=execute.js.map

package/dist/customTools/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/customTools/execute.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACjH,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAqB,MAAM,aAAa,CAAC;AAEpF,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AAgB7D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAgB,EAChB,IAA6B,EAC7B,UAA0D,EAAE;IAE5D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE;YAC/C,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wCAAwC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACnF,UAAU,EAAE,YAAY,CAAC,UAAU;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC7F,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,IAAI;YACV,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,YAAY,EAAE,cAAc;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClF,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,UAAwC,EACxC,IAA6B;IAE7B,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,SAAkB;IAC9D,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG;YACZ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;SACnG,CAAC;QACF,IAAI,OAAqB,CAAC;QAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;YAC5C,OAAO,GAAG;gBACR,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;oBACxB,CAAC,CAAC,oGAAoG;oBACtG,CAAC,CAAC,iDAAiD,KAAK,8BAA8B;gBACxF,UAAU,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;oBAC7B,CAAC,CAAC,CAAC,oCAAoC,CAAC;oBACxC,CAAC,CAAC,CAAC,qBAAqB,KAAK,GAAG,CAAC;aACpC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAiB;gBAC5B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,uHAAuH;aAC/H,CAAC;YACF,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/customTools/loader.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Load business SQL tools and annotations from YAML files.
+ *
+ * Statements are checked with the same read-only rules and schema allowlist
+ * as execute_query. A failing file stops startup.
+ */
+import { type ParameterDef, type RelationDef } from './schema.js';
+export declare class CustomToolsError extends Error {
+    constructor(message: string);
+}
+export interface StoredRelation {
+    table: string;
+    join: Record<string, string>;
+    cardinality?: RelationDef['cardinality'];
+    description?: string;
+}
+export interface StoredAnnotation {
+    table: string;
+    entity?: string;
+    description?: string;
+    columns: Record<string, string>;
+    relations: StoredRelation[];
+}
+export interface StoredTool {
+    name: string;
+    title: string;
+    toolset?: string;
+    description: string;
+    parameters: Record<string, ParameterDef>;
+    maxRows?: number;
+    /** SQL with :name placeholders already rewritten to ? markers. */
+    sql: string;
+    /** Placeholder names in bind order. */
+    placeholderNames: string[];
+    source: string;
+}
+export interface LoadedCustomTools {
+    tools: StoredTool[];
+    annotations: StoredAnnotation[];
+}
+export interface LoadCustomToolsOptions {
+    /** Uppercased library names. Omit to skip the schema allowlist. */
+    allowedSchemas?: string[];
+    /** Schema unqualified names resolve to while the allowlist is on. */
+    defaultSchema?: string;
+}
+/**
+ * Load the files or directories listed in MCP_CUSTOM_TOOLS.
+ * An unset or blank value loads nothing.
+ */
+export declare function loadCustomToolsFromEnv(): LoadedCustomTools;
+/**
+ * Read YAML files and check every statement before the server accepts connections.
+ */
+export declare function loadCustomTools(inputs: readonly string[], options?: LoadCustomToolsOptions): LoadedCustomTools;
+//# sourceMappingURL=loader.d.ts.map

package/dist/customTools/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/customTools/loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,WAAW,EAEjB,MAAM,aAAa,CAAC;AAErB,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,uCAAuC;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,WAAW,EAAE,gBAAgB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,iBAAiB,CAW1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,GAAE,sBAA2B,GACnC,iBAAiB,CAwCnB"}

package/dist/customTools/loader.js

@@ -0,0 +1,213 @@
+/**
+ * Load business SQL tools and annotations from YAML files.
+ *
+ * Statements are checked with the same read-only rules and schema allowlist
+ * as execute_query. A failing file stops startup.
+ */
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { parseDocument } from 'yaml';
+import { getAllowedSchemas, TOOL_NAMES } from '../config.js';
+import { checkQuerySchemas } from '../utils/security/schemaAllowlist.js';
+import { validateQuery } from '../utils/security/sqlSecurityValidator.js';
+import { PlaceholderError, rewriteNamedPlaceholders } from './params.js';
+import { customToolsFileSchema, formatSchemaIssues, } from './schema.js';
+export class CustomToolsError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CustomToolsError';
+    }
+}
+const EMPTY = { tools: [], annotations: [] };
+/**
+ * Load the files or directories listed in MCP_CUSTOM_TOOLS.
+ * An unset or blank value loads nothing.
+ */
+export function loadCustomToolsFromEnv() {
+    const raw = process.env.MCP_CUSTOM_TOOLS;
+    if (raw === undefined || raw.trim() === '') {
+        return EMPTY;
+    }
+    const paths = raw.split(',').map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+    return loadCustomTools(paths, {
+        allowedSchemas: getAllowedSchemas(),
+        defaultSchema: process.env.DB2I_SCHEMA,
+    });
+}
+/**
+ * Read YAML files and check every statement before the server accepts connections.
+ */
+export function loadCustomTools(inputs, options = {}) {
+    const files = inputs.flatMap((input) => collectFiles(input));
+    const tools = [];
+    const annotations = [];
+    const toolSources = new Map();
+    const annotationSources = new Map();
+    for (const file of files) {
+        const parsed = readFile(file);
+        for (const tool of parsed.tools ?? []) {
+            const stored = checkTool(tool, file, options);
+            const previous = toolSources.get(stored.name);
+            if (previous) {
+                throw new CustomToolsError(`Tool ${stored.name} is defined in both ${previous} and ${displayPath(file)}.`);
+            }
+            if (TOOL_NAMES.includes(stored.name)) {
+                throw new CustomToolsError(`${displayPath(file)}: tool ${stored.name} is already a built-in tool.`);
+            }
+            toolSources.set(stored.name, displayPath(file));
+            tools.push(stored);
+        }
+        for (const [table, annotation] of Object.entries(parsed.annotations ?? {})) {
+            const stored = storeAnnotation(table, annotation);
+            const previous = annotationSources.get(stored.table);
+            if (previous) {
+                throw new CustomToolsError(`Annotation ${stored.table} is defined in both ${previous} and ${displayPath(file)}.`);
+            }
+            annotationSources.set(stored.table, displayPath(file));
+            annotations.push(stored);
+        }
+    }
+    return { tools, annotations };
+}
+function readFile(file) {
+    let text;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Could not read file';
+        throw new CustomToolsError(`${displayPath(file)}: ${message}`);
+    }
+    const doc = parseDocument(text, { schema: 'core' });
+    if (doc.errors.length > 0) {
+        throw new CustomToolsError(`${displayPath(file)}: ${doc.errors.map((error) => error.message).join('; ')}`);
+    }
+    const parsed = customToolsFileSchema.safeParse(doc.toJS());
+    if (!parsed.success) {
+        throw new CustomToolsError(`${displayPath(file)}: ${formatSchemaIssues(parsed.error)}`);
+    }
+    return parsed.data;
+}
+function checkTool(tool, file, options) {
+    const where = `${displayPath(file)}: tool ${tool.name}`;
+    const parameters = tool.parameters ?? {};
+    let rewritten;
+    try {
+        rewritten = rewriteNamedPlaceholders(tool.sql);
+    }
+    catch (error) {
+        if (error instanceof PlaceholderError) {
+            throw new CustomToolsError(`${where}: ${error.message}`);
+        }
+        throw error;
+    }
+    const declared = new Set(Object.keys(parameters));
+    const used = new Set(rewritten.names);
+    for (const name of used) {
+        if (!declared.has(name)) {
+            throw new CustomToolsError(`${where}: placeholder :${name} has no parameter definition.`);
+        }
+    }
+    for (const name of declared) {
+        if (!used.has(name)) {
+            throw new CustomToolsError(`${where}: parameter ${name} is not used in the SQL.`);
+        }
+    }
+    const security = validateQuery(rewritten.sql);
+    if (!security.isValid) {
+        throw new CustomToolsError(`${where}: Security validation failed: ${security.violations.join('; ')}`);
+    }
+    if (options.allowedSchemas && options.allowedSchemas.length > 0) {
+        const schemaResult = checkQuerySchemas(rewritten.sql, {
+            allowed: options.allowedSchemas,
+            defaultSchema: options.defaultSchema,
+        });
+        if (!schemaResult.ok) {
+            throw new CustomToolsError(`${where}: Schema allowlist rejected the query: ${schemaResult.violations.join('; ')}`);
+        }
+    }
+    return {
+        name: tool.name,
+        title: tool.title,
+        ...(tool.toolset ? { toolset: tool.toolset } : {}),
+        description: tool.description,
+        parameters,
+        ...(tool.maxRows !== undefined ? { maxRows: tool.maxRows } : {}),
+        sql: rewritten.sql,
+        placeholderNames: rewritten.names,
+        source: displayPath(file),
+    };
+}
+function storeAnnotation(table, annotation) {
+    const columns = {};
+    for (const [column, text] of Object.entries(annotation.columns ?? {})) {
+        columns[column.toUpperCase()] = text;
+    }
+    const relations = (annotation.relations ?? []).map((relation) => {
+        const join = {};
+        for (const [from, to] of Object.entries(relation.join)) {
+            join[from.toUpperCase()] = to.toUpperCase();
+        }
+        return {
+            table: relation.table.toUpperCase(),
+            join,
+            ...(relation.cardinality ? { cardinality: relation.cardinality } : {}),
+            ...(relation.description ? { description: relation.description } : {}),
+        };
+    });
+    return {
+        table: table.toUpperCase(),
+        ...(annotation.entity ? { entity: annotation.entity } : {}),
+        ...(annotation.description ? { description: annotation.description } : {}),
+        columns,
+        relations,
+    };
+}
+function collectFiles(input) {
+    const resolved = path.resolve(input);
+    let info;
+    try {
+        info = statSync(resolved);
+    }
+    catch {
+        throw new CustomToolsError(`Custom tools path not found: ${input}`);
+    }
+    if (info.isFile()) {
+        if (!isYaml(resolved)) {
+            throw new CustomToolsError(`Custom tools file must be .yaml or .yml: ${input}`);
+        }
+        return [resolved];
+    }
+    if (!info.isDirectory()) {
+        throw new CustomToolsError(`Custom tools path is not a file or directory: ${input}`);
+    }
+    const found = [];
+    walk(resolved, found);
+    found.sort((a, b) => a.localeCompare(b));
+    if (found.length === 0) {
+        throw new CustomToolsError(`No YAML files found in ${input}`);
+    }
+    return found;
+}
+function walk(dir, found) {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        if (entry.name.startsWith('.')) {
+            continue;
+        }
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            walk(full, found);
+        }
+        else if (entry.isFile() && isYaml(entry.name)) {
+            found.push(full);
+        }
+    }
+}
+function isYaml(file) {
+    return file.toLowerCase().endsWith('.yaml') || file.toLowerCase().endsWith('.yml');
+}
+function displayPath(file) {
+    const relative = path.relative(process.cwd(), file);
+    return relative.startsWith('..') ? file : relative;
+}
+//# sourceMappingURL=loader.js.map

package/dist/customTools/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/customTools/loader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,kBAAkB,GAKnB,MAAM,aAAa,CAAC;AAErB,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AA2CD,MAAM,KAAK,GAAsB,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAEhE;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9F,OAAO,eAAe,CAAC,KAAK,EAAE;QAC5B,cAAc,EAAE,iBAAiB,EAAE;QACnC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAyB,EACzB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CACxB,QAAQ,MAAM,CAAC,IAAI,uBAAuB,QAAQ,QAAQ,WAAW,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;YACJ,CAAC;YACD,IAAK,UAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,gBAAgB,CACxB,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,IAAI,8BAA8B,CACxE,CAAC;YACJ,CAAC;YACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAED,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CACxB,cAAc,MAAM,CAAC,KAAK,uBAAuB,QAAQ,QAAQ,WAAW,CAAC,IAAI,CAAC,GAAG,CACtF,CAAC;YACJ,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YACvD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC/E,MAAM,IAAI,gBAAgB,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,gBAAgB,CACxB,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,gBAAgB,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,IAAY,EAAE,OAA+B;IAC7E,MAAM,KAAK,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IAEzC,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,kBAAkB,IAAI,+BAA+B,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,eAAe,IAAI,0BAA0B,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,iCAAiC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,EAAE;YACpD,OAAO,EAAE,OAAO,CAAC,cAAc;YAC/B,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,gBAAgB,CACxB,GAAG,KAAK,0CAA0C,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU;QACV,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,gBAAgB,EAAE,SAAS,CAAC,KAAK;QACjC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,UAAyB;IAC/D,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC;IACvC,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9D,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE;YACnC,IAAI;YACJ,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAgB,CAAC,iDAAiD,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,KAAe;IACxC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC"}

package/dist/customTools/params.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Turn :name placeholders into positional ? markers.
+ *
+ * Names inside string literals, quoted identifiers, and comments stay as text.
+ * A bare ? is rejected so bind order cannot be mixed with hand-written markers.
+ */
+export declare class PlaceholderError extends Error {
+    constructor(message: string);
+}
+export interface RewrittenSql {
+    /** SQL with :name placeholders replaced by ? markers. */
+    sql: string;
+    /** Placeholder names in bind order. Repeated names are kept. */
+    names: string[];
+}
+/**
+ * Replace :name placeholders with ? and return the names in bind order.
+ *
+ * @throws PlaceholderError when a colon is not a :name placeholder, a ? marker
+ * is already present, or a quote or block comment is left open.
+ */
+export declare function rewriteNamedPlaceholders(sql: string): RewrittenSql;
+//# sourceMappingURL=params.d.ts.map

package/dist/customTools/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/customTools/params.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAwDlE"}

package/dist/customTools/params.js

@@ -0,0 +1,93 @@
+/**
+ * Turn :name placeholders into positional ? markers.
+ *
+ * Names inside string literals, quoted identifiers, and comments stay as text.
+ * A bare ? is rejected so bind order cannot be mixed with hand-written markers.
+ */
+const PLACEHOLDER_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export class PlaceholderError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PlaceholderError';
+    }
+}
+/**
+ * Replace :name placeholders with ? and return the names in bind order.
+ *
+ * @throws PlaceholderError when a colon is not a :name placeholder, a ? marker
+ * is already present, or a quote or block comment is left open.
+ */
+export function rewriteNamedPlaceholders(sql) {
+    let out = '';
+    const names = [];
+    let i = 0;
+    while (i < sql.length) {
+        const ch = sql[i];
+        const next = sql[i + 1];
+        if (ch === '-' && next === '-') {
+            const end = sql.indexOf('\n', i);
+            if (end === -1) {
+                out += sql.slice(i);
+                break;
+            }
+            out += sql.slice(i, end);
+            i = end;
+            continue;
+        }
+        if (ch === '/' && next === '*') {
+            const end = sql.indexOf('*/', i + 2);
+            if (end === -1) {
+                throw new PlaceholderError('Unclosed block comment.');
+            }
+            out += sql.slice(i, end + 2);
+            i = end + 2;
+            continue;
+        }
+        if (ch === "'" || ch === '"') {
+            const end = endOfQuoted(sql, i, ch);
+            out += sql.slice(i, end);
+            i = end;
+            continue;
+        }
+        if (ch === '?') {
+            throw new PlaceholderError('Use :name placeholders. Question marks are reserved for bound parameters.');
+        }
+        if (ch === ':') {
+            const name = readPlaceholderName(sql, i + 1);
+            names.push(name);
+            out += '?';
+            i += 1 + name.length;
+            continue;
+        }
+        out += ch;
+        i += 1;
+    }
+    return { sql: out, names };
+}
+function readPlaceholderName(sql, start) {
+    let end = start;
+    while (end < sql.length && /[A-Za-z0-9_]/.test(sql[end])) {
+        end += 1;
+    }
+    const name = sql.slice(start, end);
+    if (!PLACEHOLDER_NAME.test(name)) {
+        throw new PlaceholderError('Invalid placeholder. Write :name using letters, digits, and underscores.');
+    }
+    return name;
+}
+function endOfQuoted(sql, start, quote) {
+    let i = start + 1;
+    while (i < sql.length) {
+        if (sql[i] === quote) {
+            if (sql[i + 1] === quote) {
+                i += 2;
+                continue;
+            }
+            return i + 1;
+        }
+        i += 1;
+    }
+    const kind = quote === "'" ? 'string literal' : 'quoted identifier';
+    throw new PlaceholderError(`Unclosed ${kind}.`);
+}
+//# sourceMappingURL=params.js.map

package/dist/customTools/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../src/customTools/params.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAEpD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AASD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAExB,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpB,MAAM;YACR,CAAC;YACD,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACzB,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;YACxD,CAAC;YACD,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YAC7B,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACzB,CAAC,GAAG,GAAG,CAAC;YACR,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,gBAAgB,CACxB,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,GAAG,IAAI,GAAG,CAAC;YACX,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YACrB,SAAS;QACX,CAAC;QAED,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,KAAa;IACrD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CACxB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa,EAAE,KAAgB;IAC/D,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACrB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACzB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACpE,MAAM,IAAI,gBAAgB,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/customTools/registry.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Process-wide custom tools, loaded once at startup.
+ */
+import type { LoadedCustomTools, StoredAnnotation, StoredTool } from './loader.js';
+type ParseOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    violations?: string[];
+};
+export declare function cachedParse(toolName: string): ParseOutcome | undefined;
+export declare function cacheParse(toolName: string, outcome: ParseOutcome): void;
+export declare function setCustomTools(loaded: LoadedCustomTools): void;
+export declare function getCustomTools(): LoadedCustomTools;
+export declare function resetCustomTools(): void;
+export type { StoredAnnotation, StoredTool };
+//# sourceMappingURL=registry.d.ts.map

package/dist/customTools/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/customTools/registry.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMnF,KAAK,YAAY,GACb;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAIxD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAEtE;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAExE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAG9D;AAED,wBAAgB,cAAc,IAAI,iBAAiB,CAElD;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC"}