feat: add query template system #23

New issue

Open

opened 2026-02-21 01:03:06 +00:00 by Clotho · 0 comments

Clotho commented

2026-02-21 01:03:06 +00:00

Member

Summary

Agents repeatedly construct the same SQL queries. A template system would allow workspaces to save, name, and reuse parameterized queries safely.

Features

Create/update/delete query templates per workspace
Named parameters (:user_id, :start_date)
Template validation against SQL whitelist on save
Execute template by name with parameter substitution
Template versioning / history

Security Considerations

Templates must be validated on creation (not just execution)
Parameter substitution must use PDO bindings, never string interpolation
Templates scoped to workspace (no cross-workspace access)

Files

src/Mcp/Services/QueryTemplateService.php (new)
src/Mcp/Tools/QueryTemplate.php (new)
src/Mcp/Models/McpQueryTemplate.php (new)
src/Mcp/Migrations/xxx_create_mcp_query_templates_table.php (new)

Notes

Also noted in TODO.md under High Priority Features. Estimated effort: 5-6 hours.

## Summary Agents repeatedly construct the same SQL queries. A template system would allow workspaces to save, name, and reuse parameterized queries safely. ## Features - Create/update/delete query templates per workspace - Named parameters (`:user_id`, `:start_date`) - Template validation against SQL whitelist on save - Execute template by name with parameter substitution - Template versioning / history ## Security Considerations - Templates must be validated on creation (not just execution) - Parameter substitution must use PDO bindings, never string interpolation - Templates scoped to workspace (no cross-workspace access) ## Files - `src/Mcp/Services/QueryTemplateService.php` (new) - `src/Mcp/Tools/QueryTemplate.php` (new) - `src/Mcp/Models/McpQueryTemplate.php` (new) - `src/Mcp/Migrations/xxx_create_mcp_query_templates_table.php` (new) ## Notes Also noted in TODO.md under High Priority Features. Estimated effort: 5-6 hours.