u

src/providers/mssql/queries/mcp.js

@@ -0,0 +1,90 @@
+export const INSERT_CLIENT = `
+INSERT INTO mcp_client (client_id, client_secret, client_name, redirect_uris, grant_types, response_types, scope)
+OUTPUT INSERTED.id, INSERTED.client_id, INSERTED.client_secret, INSERTED.client_name, INSERTED.redirect_uris, INSERTED.grant_types, INSERTED.response_types, INSERTED.scope, INSERTED.created_at
+VALUES (@clientId, @clientSecret, @clientName, @redirectUris, @grantTypes, @responseTypes, @scope)
+`;
+
+export const GET_CLIENT = `
+SELECT
+    id,
+    client_id AS clientId,
+    client_secret AS clientSecret,
+    client_name AS clientName,
+    redirect_uris AS redirectUris,
+    grant_types AS grantTypes,
+    response_types AS responseTypes,
+    scope,
+    created_at AS createdAt
+FROM mcp_client
+WHERE client_id = @clientId
+`;
+
+export const LIST_CLIENTS = `
+SELECT
+    id,
+    client_id AS clientId,
+    client_name AS clientName,
+    redirect_uris AS redirectUris,
+    grant_types AS grantTypes,
+    response_types AS responseTypes,
+    scope,
+    created_at AS createdAt
+FROM mcp_client
+ORDER BY created_at DESC
+`;
+
+export const DELETE_CLIENT = `
+DELETE FROM mcp_client
+WHERE client_id = @clientId
+`;
+
+export const INSERT_AUTH_CODE = `
+INSERT INTO mcp_auth_code (code, client_id, google_auth_id, redirect_uri, code_challenge, code_challenge_method, scope, expires_at)
+VALUES (@code, @clientId, @googleAuthId, @redirectUri, @codeChallenge, @codeChallengeMethod, @scope, @expiresAt)
+`;
+
+export const GET_AUTH_CODE = `
+SELECT
+    code,
+    client_id AS clientId,
+    google_auth_id AS googleAuthId,
+    redirect_uri AS redirectUri,
+    code_challenge AS codeChallenge,
+    code_challenge_method AS codeChallengeMethod,
+    scope,
+    expires_at AS expiresAt,
+    used
+FROM mcp_auth_code
+WHERE code = @code
+`;
+
+export const CONSUME_AUTH_CODE = `
+UPDATE mcp_auth_code
+SET used = 1
+WHERE code = @code
+`;
+
+export const INSERT_REFRESH_TOKEN = `
+INSERT INTO mcp_token (refresh_token, client_id, google_auth_id, scope, expires_at)
+OUTPUT INSERTED.id
+VALUES (@refreshToken, @clientId, @googleAuthId, @scope, @expiresAt)
+`;
+
+export const GET_REFRESH_TOKEN = `
+SELECT
+    id,
+    refresh_token AS refreshToken,
+    client_id AS clientId,
+    google_auth_id AS googleAuthId,
+    scope,
+    expires_at AS expiresAt,
+    revoked
+FROM mcp_token
+WHERE refresh_token = @refreshToken
+`;
+
+export const REVOKE_REFRESH_TOKEN = `
+UPDATE mcp_token
+SET revoked = 1
+WHERE refresh_token = @refreshToken
+`;

src/providers/mssql/schema.js

@@ -1177,6 +1177,61 @@ BEGIN
 END
 `;
 
+export const INIT_MCP_CLIENT = `
+IF NOT EXISTS (SELECT * FROM sys.tables WHERE name = 'mcp_client')
+BEGIN
+    CREATE TABLE mcp_client (
+        id INT IDENTITY(1,1) PRIMARY KEY,
+        client_id NVARCHAR(100) NOT NULL,
+        client_secret NVARCHAR(255) NULL,
+        client_name NVARCHAR(255) NOT NULL,
+        redirect_uris NVARCHAR(MAX) NOT NULL,
+        grant_types NVARCHAR(255) NULL,
+        response_types NVARCHAR(255) NULL,
+        scope NVARCHAR(255) NULL,
+        created_at DATETIME2 NOT NULL CONSTRAINT DF_mcp_client_created_at DEFAULT SYSUTCDATETIME(),
+        CONSTRAINT UQ_mcp_client_client_id UNIQUE (client_id)
+    );
+END
+`;
+
+export const INIT_MCP_AUTH_CODE = `
+IF NOT EXISTS (SELECT * FROM sys.tables WHERE name = 'mcp_auth_code')
+BEGIN
+    CREATE TABLE mcp_auth_code (
+        code NVARCHAR(128) PRIMARY KEY,
+        client_id NVARCHAR(100) NOT NULL,
+        google_auth_id INT NOT NULL,
+        redirect_uri NVARCHAR(2048) NOT NULL,
+        code_challenge NVARCHAR(255) NOT NULL,
+        code_challenge_method NVARCHAR(32) NOT NULL,
+        scope NVARCHAR(255) NULL,
+        expires_at DATETIME2 NOT NULL,
+        used TINYINT NOT NULL CONSTRAINT DF_mcp_auth_code_used DEFAULT 0,
+        created_at DATETIME2 NOT NULL CONSTRAINT DF_mcp_auth_code_created_at DEFAULT SYSUTCDATETIME(),
+        CONSTRAINT FK_mcp_auth_code_google_auth FOREIGN KEY (google_auth_id) REFERENCES google_auth(id) ON DELETE CASCADE
+    );
+END
+`;
+
+export const INIT_MCP_TOKEN = `
+IF NOT EXISTS (SELECT * FROM sys.tables WHERE name = 'mcp_token')
+BEGIN
+    CREATE TABLE mcp_token (
+        id INT IDENTITY(1,1) PRIMARY KEY,
+        refresh_token NVARCHAR(128) NOT NULL,
+        client_id NVARCHAR(100) NOT NULL,
+        google_auth_id INT NOT NULL,
+        scope NVARCHAR(255) NULL,
+        expires_at DATETIME2 NOT NULL,
+        revoked TINYINT NOT NULL CONSTRAINT DF_mcp_token_revoked DEFAULT 0,
+        created_at DATETIME2 NOT NULL CONSTRAINT DF_mcp_token_created_at DEFAULT SYSUTCDATETIME(),
+        CONSTRAINT UQ_mcp_token_refresh UNIQUE (refresh_token),
+        CONSTRAINT FK_mcp_token_google_auth FOREIGN KEY (google_auth_id) REFERENCES google_auth(id) ON DELETE CASCADE
+    );
+END
+`;
+
 /** DDL scripts in dependency order for schema init. */
 export const SCHEMA_SCRIPTS = [
     INIT_META,
@@ -1244,4 +1299,7 @@ export const SCHEMA_SCRIPTS = [
     INIT_PAYMENT,
     INIT_SHIPPING,
     INIT_PACKAGE,
+    INIT_MCP_CLIENT,
+    INIT_MCP_AUTH_CODE,
+    INIT_MCP_TOKEN,
 ];

src/providers/sqlite3/index.js

@@ -19,13 +19,23 @@ function normalizeParamValue(value) {
   return value;
 }
 
-function bindParams(params) {
-  return Object.fromEntries(
+function bindParams(params, sql = null) {
+  const bound = Object.fromEntries(
     Object.entries(params).map(([key, value]) => [
       key.replace(/^[@:$]/, ''),
       normalizeParamValue(value),
     ]),
   );
+  if (typeof sql === 'string') {
+    const matches = sql.matchAll(/[@:$]([a-zA-Z0-9_]+)/g);
+    for (const match of matches) {
+      const name = match[1];
+      if (!(name in bound)) {
+        bound[name] = null;
+      }
+    }
+  }
+  return bound;
 }
 
 function normalizeInsertId(value) {
@@ -227,7 +237,7 @@ export class BetterSqlite3Executor {
   /** @returns {Promise<import('../provider.js').QueryResult>} */
   async query(sql, params = {}) {
     const statement = this.db.prepare(sql);
-    const bindings = bindParams(params);
+    const bindings = bindParams(params, sql);
 
     if (statement.reader) {
       const rows = statement.all(bindings);

src/providers/sqlite3/queries/mcp.js

@@ -0,0 +1,16 @@
+import * as source from '../../mssql/queries/mcp.js';
+import { translateQueries } from './translate.js';
+
+const queries = translateQueries(source, 'mcp');
+export const {
+  INSERT_CLIENT,
+  GET_CLIENT,
+  LIST_CLIENTS,
+  DELETE_CLIENT,
+  INSERT_AUTH_CODE,
+  GET_AUTH_CODE,
+  CONSUME_AUTH_CODE,
+  INSERT_REFRESH_TOKEN,
+  GET_REFRESH_TOKEN,
+  REVOKE_REFRESH_TOKEN,
+} = queries;

src/providers/sqlite3/schema.js

@@ -845,6 +845,50 @@ CREATE TABLE IF NOT EXISTS package (
 );
 `;
 
+export const INIT_MCP_CLIENT = `
+CREATE TABLE IF NOT EXISTS mcp_client (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    client_id TEXT NOT NULL UNIQUE,
+    client_secret TEXT,
+    client_name TEXT NOT NULL,
+    redirect_uris TEXT NOT NULL,
+    grant_types TEXT,
+    response_types TEXT,
+    scope TEXT,
+    created_at TEXT NOT NULL DEFAULT (${UTC_NOW})
+);
+`;
+
+export const INIT_MCP_AUTH_CODE = `
+CREATE TABLE IF NOT EXISTS mcp_auth_code (
+    code TEXT PRIMARY KEY,
+    client_id TEXT NOT NULL,
+    google_auth_id INTEGER NOT NULL,
+    redirect_uri TEXT NOT NULL,
+    code_challenge TEXT NOT NULL,
+    code_challenge_method TEXT NOT NULL,
+    scope TEXT,
+    expires_at TEXT NOT NULL,
+    used INTEGER NOT NULL DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (${UTC_NOW}),
+    FOREIGN KEY (google_auth_id) REFERENCES google_auth(id) ON DELETE CASCADE
+);
+`;
+
+export const INIT_MCP_TOKEN = `
+CREATE TABLE IF NOT EXISTS mcp_token (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    refresh_token TEXT NOT NULL UNIQUE,
+    client_id TEXT NOT NULL,
+    google_auth_id INTEGER NOT NULL,
+    scope TEXT,
+    expires_at TEXT NOT NULL,
+    revoked INTEGER NOT NULL DEFAULT 0,
+    created_at TEXT NOT NULL DEFAULT (${UTC_NOW}),
+    FOREIGN KEY (google_auth_id) REFERENCES google_auth(id) ON DELETE CASCADE
+);
+`;
+
 /** DDL scripts in dependency order for SQLite schema initialization. */
 export const SCHEMA_SCRIPTS = [
     INIT_META,
@@ -909,4 +953,7 @@ export const SCHEMA_SCRIPTS = [
     INIT_PAYMENT,
     INIT_SHIPPING,
     INIT_PACKAGE,
+    INIT_MCP_CLIENT,
+    INIT_MCP_AUTH_CODE,
+    INIT_MCP_TOKEN,
 ];