mssql-mcp 2.1.1 → 2.3.0

package/dist/tests/unit/markdown.test.js

@@ -0,0 +1,70 @@
+import { strict as assert } from "node:assert";
+import { test } from "node:test";
+import { formatMarkdownTable, formatMarkdownList, formatMarkdownMultiRecordsets, } from "../../src/utils/markdown.js";
+test("formatMarkdownTable - renders header and rows", () => {
+    const rows = [
+        { name: "Users", schema: "dbo" },
+        { name: "Orders", schema: "sales" },
+    ];
+    const result = formatMarkdownTable(rows);
+    assert.ok(result.includes("| name | schema |"), "header row missing");
+    assert.ok(result.includes("| --- |"), "separator row missing");
+    assert.ok(result.includes("| Users | dbo |"), "data row 1 missing");
+    assert.ok(result.includes("| Orders | sales |"), "data row 2 missing");
+});
+test("formatMarkdownTable - includes title when provided", () => {
+    const rows = [{ id: 1 }];
+    const result = formatMarkdownTable(rows, "My Table");
+    assert.ok(result.startsWith("**My Table**"), "title missing");
+});
+test("formatMarkdownTable - empty rows returns no results message", () => {
+    const result = formatMarkdownTable([]);
+    assert.ok(result.includes("No results found."));
+});
+test("formatMarkdownTable - empty rows with title includes title", () => {
+    const result = formatMarkdownTable([], "Empty");
+    assert.ok(result.includes("**Empty**"));
+    assert.ok(result.includes("No results found."));
+});
+test("formatMarkdownTable - null/undefined values render as empty string", () => {
+    const rows = [{ id: 1, value: null, flag: undefined }];
+    const result = formatMarkdownTable(rows);
+    assert.ok(result.includes("| 1 |"));
+});
+test("formatMarkdownTable - pipe characters in cell values are escaped", () => {
+    const rows = [{ name: "foo | bar", status: "ok" }];
+    const result = formatMarkdownTable(rows);
+    assert.ok(result.includes("foo \\| bar"), "pipe not escaped");
+    assert.ok(!result.includes("foo | bar"), "raw pipe should not appear in data row");
+});
+test("formatMarkdownTable - newlines in cell values are replaced with space", () => {
+    const rows = [{ notes: "line1\nline2", other: "x" }];
+    const result = formatMarkdownTable(rows);
+    assert.ok(result.includes("line1 line2"), "newline not replaced");
+    assert.ok(!result.includes("line1\nline2"), "raw newline should not appear");
+});
+test("formatMarkdownTable - CRLF in cell values are replaced with space", () => {
+    const rows = [{ notes: "line1\r\nline2" }];
+    const result = formatMarkdownTable(rows);
+    assert.ok(result.includes("line1 line2"));
+});
+test("formatMarkdownList - renders key-value pairs", () => {
+    const result = formatMarkdownList({ status: "connected", server: "localhost" });
+    assert.ok(result.includes("**status**: connected"));
+    assert.ok(result.includes("**server**: localhost"));
+});
+test("formatMarkdownList - includes title when provided", () => {
+    const result = formatMarkdownList({ x: 1 }, "Info");
+    assert.ok(result.startsWith("**Info**"));
+});
+test("formatMarkdownMultiRecordsets - renders multiple result sets", () => {
+    const rs1 = [{ id: 1 }];
+    const rs2 = [{ name: "foo" }];
+    const result = formatMarkdownMultiRecordsets([rs1, rs2]);
+    assert.ok(result.includes("Result Set 1"));
+    assert.ok(result.includes("Result Set 2"));
+});
+test("formatMarkdownMultiRecordsets - empty recordsets returns message", () => {
+    const result = formatMarkdownMultiRecordsets([]);
+    assert.ok(result.includes("No result sets returned."));
+});

package/dist/tests/unit/query-builders.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/unit/query-builders.test.js

@@ -0,0 +1,63 @@
+import { strict as assert } from "node:assert";
+import { test } from "node:test";
+import { buildSelectQuery, buildSelectWithWhereQuery, buildSchemaObjectsQuery, } from "../../src/db/query-builders.js";
+test("buildSelectQuery - basic SELECT *", () => {
+    const q = buildSelectQuery("dbo", "Users", null, null, 0, 20);
+    assert.ok(q.includes("[dbo].[Users]"));
+    assert.ok(q.includes("OFFSET 0 ROWS FETCH NEXT 20 ROWS ONLY"));
+    assert.ok(q.includes("SELECT *"));
+});
+test("buildSelectQuery - with columns projection", () => {
+    const q = buildSelectQuery("dbo", "Users", ["Id", "Name"], null, 0, 10);
+    assert.ok(q.includes("[Id], [Name]"));
+    assert.ok(!q.includes("SELECT *"));
+});
+test("buildSelectQuery - with orderBy", () => {
+    const q = buildSelectQuery("dbo", "Users", null, "Name ASC", 0, 20);
+    assert.ok(q.includes("ORDER BY Name ASC"));
+});
+test("buildSelectQuery - default ORDER BY fallback", () => {
+    const q = buildSelectQuery("dbo", "Users", null, null, 0, 20);
+    assert.ok(q.includes("ORDER BY (SELECT NULL)"));
+});
+test("buildSelectQuery - offset and limit", () => {
+    const q = buildSelectQuery("dbo", "Orders", null, null, 40, 10);
+    assert.ok(q.includes("OFFSET 40 ROWS FETCH NEXT 10 ROWS ONLY"));
+});
+test("buildSelectWithWhereQuery - includes WHERE", () => {
+    const q = buildSelectWithWhereQuery("dbo", "Orders", null, "Status = @status", null, 0, 20);
+    assert.ok(q.includes("WHERE Status = @status"));
+    assert.ok(q.includes("[dbo].[Orders]"));
+});
+test("buildSelectQuery - rejects invalid schema", () => {
+    assert.throws(() => buildSelectQuery("bad schema", "Users", null, null, 0, 20), /Invalid identifier/);
+});
+test("buildSelectQuery - rejects invalid table", () => {
+    assert.throws(() => buildSelectQuery("dbo", "bad table", null, null, 0, 20), /Invalid identifier/);
+});
+test("buildSchemaObjectsQuery - tables only", () => {
+    const q = buildSchemaObjectsQuery("tables");
+    assert.ok(q.includes("INFORMATION_SCHEMA.TABLES"));
+    assert.ok(!q.includes("INFORMATION_SCHEMA.VIEWS"));
+    assert.ok(!q.includes("ROUTINES"));
+});
+test("buildSchemaObjectsQuery - views only", () => {
+    const q = buildSchemaObjectsQuery("views");
+    assert.ok(q.includes("INFORMATION_SCHEMA.VIEWS"));
+    assert.ok(!q.includes("INFORMATION_SCHEMA.TABLES"));
+});
+test("buildSchemaObjectsQuery - all includes all types", () => {
+    const q = buildSchemaObjectsQuery("all");
+    assert.ok(q.includes("INFORMATION_SCHEMA.TABLES"));
+    assert.ok(q.includes("INFORMATION_SCHEMA.VIEWS"));
+    assert.ok(q.includes("ROUTINE_TYPE = 'PROCEDURE'"));
+    assert.ok(q.includes("ROUTINE_TYPE = 'FUNCTION'"));
+});
+test("buildSchemaObjectsQuery - with schema filter uses @schemaName", () => {
+    const q = buildSchemaObjectsQuery("all", "dbo");
+    assert.ok(q.includes("@schemaName"));
+});
+test("buildSchemaObjectsQuery - without schema filter has no @schemaName", () => {
+    const q = buildSchemaObjectsQuery("tables");
+    assert.ok(!q.includes("@schemaName"));
+});

package/dist/tests/unit/tool-contracts.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/unit/tool-contracts.test.js

@@ -0,0 +1,62 @@
+import { strict as assert } from "node:assert";
+import { test } from "node:test";
+import { buildPaginationMeta, clampLimit } from "../../src/utils/pagination.js";
+import { truncatePayload } from "../../src/utils/format.js";
+test("clampLimit - defaults to DEFAULT_PAGE_SIZE (20)", () => {
+    assert.equal(clampLimit(undefined), 20);
+});
+test("clampLimit - enforces max (200)", () => {
+    assert.equal(clampLimit(9999), 200);
+    assert.equal(clampLimit(201), 200);
+});
+test("clampLimit - enforces min (1)", () => {
+    assert.equal(clampLimit(0), 1);
+    assert.equal(clampLimit(-5), 1);
+});
+test("clampLimit - passes through valid value", () => {
+    assert.equal(clampLimit(50), 50);
+    assert.equal(clampLimit(1), 1);
+    assert.equal(clampLimit(200), 200);
+});
+test("buildPaginationMeta - has_more true when count === limit", () => {
+    const p = buildPaginationMeta(20, 20, 0);
+    assert.equal(p.has_more, true);
+    assert.equal(p.next_offset, 20);
+    assert.equal(p.offset, 0);
+    assert.equal(p.count, 20);
+    assert.equal(p.limit, 20);
+});
+test("buildPaginationMeta - has_more false when count < limit", () => {
+    const p = buildPaginationMeta(5, 20, 0);
+    assert.equal(p.has_more, false);
+    assert.equal(p.next_offset, null);
+});
+test("buildPaginationMeta - includes total_count when provided", () => {
+    const p = buildPaginationMeta(20, 20, 0, 100);
+    assert.equal(p.total_count, 100);
+});
+test("buildPaginationMeta - next_offset uses offset correctly", () => {
+    const p = buildPaginationMeta(20, 20, 40);
+    assert.equal(p.next_offset, 60);
+});
+test("truncatePayload - no truncation for small data", () => {
+    const data = [{ id: 1 }, { id: 2 }];
+    const result = truncatePayload(data, 100_000);
+    assert.equal(result.truncated, false);
+    assert.equal(result.data.length, 2);
+    assert.equal(result.truncation_message, undefined);
+});
+test("truncatePayload - truncates when over byte limit", () => {
+    const largeRow = { data: "x".repeat(1000) };
+    const rows = Array.from({ length: 200 }, (_, i) => ({ ...largeRow, id: i }));
+    const result = truncatePayload(rows, 10_000);
+    assert.equal(result.truncated, true);
+    assert.ok(result.data.length < 200, `Expected < 200 rows, got ${result.data.length}`);
+    assert.ok(result.truncation_message?.includes("truncated"));
+    assert.ok(result.truncation_message?.includes("200"));
+});
+test("truncatePayload - empty array not truncated", () => {
+    const result = truncatePayload([], 100_000);
+    assert.equal(result.truncated, false);
+    assert.equal(result.data.length, 0);
+});

package/dist/tests/unit/validators.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tests/unit/validators.test.js

@@ -0,0 +1,51 @@
+import { strict as assert } from "node:assert";
+import { test } from "node:test";
+import { isValidIdentifier, validateIdentifier, bracketIdentifier, validateOrderBy, } from "../../src/db/validators.js";
+test("isValidIdentifier - valid names", () => {
+    assert.ok(isValidIdentifier("dbo"));
+    assert.ok(isValidIdentifier("MyTable"));
+    assert.ok(isValidIdentifier("_private"));
+    assert.ok(isValidIdentifier("table_123"));
+    assert.ok(isValidIdentifier("a$b"));
+    assert.ok(isValidIdentifier("col#1"));
+    assert.ok(isValidIdentifier("_@col"));
+});
+test("isValidIdentifier - invalid names", () => {
+    assert.ok(!isValidIdentifier(""));
+    assert.ok(!isValidIdentifier("1table"));
+    assert.ok(!isValidIdentifier("ta ble"));
+    assert.ok(!isValidIdentifier("ta'ble"));
+    assert.ok(!isValidIdentifier("ta;ble"));
+    assert.ok(!isValidIdentifier("ta--ble"));
+    assert.ok(!isValidIdentifier("ta/*ble"));
+    assert.ok(!isValidIdentifier("ta\nble"));
+});
+test("validateIdentifier - throws on invalid", () => {
+    assert.throws(() => validateIdentifier("bad name", "test"), /Invalid test/);
+    assert.throws(() => validateIdentifier("1start", "test"), /Invalid test/);
+});
+test("validateIdentifier - returns valid name", () => {
+    assert.equal(validateIdentifier("dbo", "schema"), "dbo");
+});
+test("bracketIdentifier - wraps valid name", () => {
+    assert.equal(bracketIdentifier("dbo"), "[dbo]");
+    assert.equal(bracketIdentifier("MyTable"), "[MyTable]");
+    assert.equal(bracketIdentifier("_col"), "[_col]");
+});
+test("bracketIdentifier - throws on invalid", () => {
+    assert.throws(() => bracketIdentifier("bad name"), /Invalid identifier/);
+    assert.throws(() => bracketIdentifier("1bad"), /Invalid identifier/);
+});
+test("validateOrderBy - valid clauses", () => {
+    assert.equal(validateOrderBy("Name ASC"), "Name ASC");
+    assert.equal(validateOrderBy("Id DESC, Name ASC"), "Id DESC, Name ASC");
+    assert.equal(validateOrderBy("CreatedAt"), "CreatedAt");
+    assert.equal(validateOrderBy("[Id] DESC"), "[Id] DESC");
+    assert.equal(validateOrderBy("t.Name"), "t.Name");
+});
+test("validateOrderBy - invalid clauses", () => {
+    assert.throws(() => validateOrderBy("1+1"), /Invalid ORDER BY/);
+    assert.throws(() => validateOrderBy("Name; DROP TABLE"), /Invalid ORDER BY/);
+    assert.throws(() => validateOrderBy("Name UNION SELECT"), /Invalid ORDER BY/);
+    assert.throws(() => validateOrderBy("Name--comment"), /Invalid ORDER BY/);
+});

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "mssql-mcp",
-  "version": "2.1.1",
+  "version": "2.3.0",
   "description": "MCP Server for MS SQL Server integration with Claude Desktop, Cursor, Windsurf and VS Code",
-  "main": "dist/index.js",
+  "main": "dist/src/index.js",
   "type": "module",
   "bin": {
-    "mssql-mcp-server": "dist/index.js"
+    "mssql-mcp-server": "dist/src/index.js"
   },
   "files": [
     "dist/**/*",
@@ -26,10 +26,13 @@
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
-    "start": "node dist/index.js",
+    "start": "node dist/src/index.js",
+    "start:http": "cross-env MCP_TRANSPORT=http node dist/src/index.js",
     "clean": "rimraf dist",
     "prepublishOnly": "npm run clean && npm run build",
-    "test": "echo \"No tests specified\" && exit 0"
+    "typecheck": "tsc --noEmit",
+    "test": "node --test dist/tests/unit/validators.test.js dist/tests/unit/query-builders.test.js dist/tests/unit/tool-contracts.test.js dist/tests/unit/markdown.test.js",
+    "ci": "npm run typecheck && npm run build && npm test"
   },
   "keywords": [
     "mcp",
@@ -45,7 +48,7 @@
   "author": "BYMCS <hello@bymcs.com>",
   "license": "MIT",
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.25.1",
+    "@modelcontextprotocol/sdk": "1.28.0",
     "dotenv": "^16.3.1",
     "mssql": "^11.0.1",
     "zod": "^3.25.0"
@@ -53,6 +56,7 @@
   "devDependencies": {
     "@types/mssql": "^9.1.7",
     "@types/node": "^20.0.0",
+    "cross-env": "^7.0.3",
     "rimraf": "^5.0.0",
     "typescript": "^5.3.0"
   }