Function validateQuery

src/services/mcp/query-validator.ts:22–49

(query: string)

};

export function validateQuery(query: string): QueryValidationResult {
    for (const pattern of BLOCKED_PATTERNS) {
        if (pattern.test(query)) {
            return {
                allowed: false,
                warning: `Query blocked: ${query.trim().split(/\s+/).slice(0, 3).join(' ').toUpperCase()} is not allowed via MCP`,
            };
        }
    }

    if (DELETE_WITHOUT_WHERE.test(query)) {
        return {
            allowed: true,
            warning: 'Warning: DELETE without WHERE clause detected',
        };
    }

    for (const { pattern, label } of WARNING_PATTERNS) {
        if (pattern.test(query)) {
            return {
                allowed: true,
                warning: `Warning: ${label} statement detected`,
            };
        }
    }

    return { allowed: true };
}

export function getQueryType(query: string): string {
    const match = query.trim().match(/^\s*(\w+)/);