Tu DB como tools MCP

-- Doc example: the same DB exposed as MCP tools — one pure task speaks JSON-RPC.
-- REST and MCP share ONE userland "declaration" (whitelist + RLS): the mcp() task here
-- is what the page (45-db-mcp) wires to `route "POST /mcp"`. The `user` is threaded
-- EXPLICITLY into every tool call — RLS works identically over MCP.
intent: "doc example: DB-as-MCP — data tools with row-level security"
require db(":memory:")

db_open(":memory:")
sql_exec("CREATE TABLE carts (id INTEGER PRIMARY KEY, customer_phone TEXT, status TEXT)")
sql_exec("INSERT INTO carts (customer_phone, status) VALUES ('+549115555', 'open')")
sql_exec("INSERT INTO carts (customer_phone, status) VALUES ('+549119999', 'open')")

let EXPOSED be ["carts"]

task rls_allow(t, row, user)
    when t == "carts"
        give user.role == "admin" or row.customer_phone == user.phone
    give true

task table_rows(t, user)
    when not contains(EXPOSED, t)
        give nothing
    give where(sql("SELECT * FROM " + t), (r) => rls_allow(t, r, user))

-- One task = the whole MCP server (initialize / tools/list / tools/call).
task mcp(req, u)
    let m be get(req, "method", "")
    let rid be get(req, "id", nothing)
    when starts_with(m, "notifications/")      -- a notification has no id and gets no answer
        give nothing
    when m == "initialize"
        give {"jsonrpc": "2.0", "id": rid, "result": {"protocolVersion": "2024-11-05", "capabilities": {"tools": {}}, "serverInfo": {"name": "my-db", "version": "0.1"}}}
    when m == "tools/list"
        give {"jsonrpc": "2.0", "id": rid, "result": {"tools": [
            {"name": "table_rows", "description": "Rows of an exposed table, filtered by row-level security.", "inputSchema": {"type": "object", "properties": {"table": {"type": "string"}}, "required": ["table"]}}
        ]}}
    when m == "tools/call"
        let p be get(req, "params", {})
        when get(p, "name", nothing) == "table_rows"
            let rows be table_rows(get(get(p, "arguments", {}), "table", nothing), u)   -- RLS filters for THIS user
            when rows == nothing
                give {"jsonrpc": "2.0", "id": rid, "error": {"code": -32602, "message": "no such resource"}}
            give {"jsonrpc": "2.0", "id": rid, "result": {"content": [{"type": "text", "text": json_encode(rows)}]}}
        give {"jsonrpc": "2.0", "id": rid, "error": {"code": -32602, "message": "unknown tool"}}
    give {"jsonrpc": "2.0", "id": rid, "error": {"code": -32601, "message": "method not found"}}

let ADMIN be {"user": "root", "role": "admin", "phone": ""}
let MARIA be {"user": "maria", "role": "customer", "phone": "+549115555"}

print("tools: " + text(length(mcp({"method": "tools/list", "id": 1}, ADMIN)["result"]["tools"])))

test "initialize answers the MCP handshake"
    let r be mcp({"method": "initialize", "id": 1}, ADMIN)
    assert_eq(r["result"]["protocolVersion"], "2024-11-05")

test "tools/call threads the user: RLS filters rows identically to REST"
    let all be mcp({"method": "tools/call", "id": 2, "params": {"name": "table_rows", "arguments": {"table": "carts"}}}, ADMIN)
    assert_eq(length(json_decode(all["result"]["content"][0]["text"])), 2)
    let mine be mcp({"method": "tools/call", "id": 3, "params": {"name": "table_rows", "arguments": {"table": "carts"}}}, MARIA)
    assert_eq(length(json_decode(mine["result"]["content"][0]["text"])), 1)

test "unknown tool and unknown method are JSON-RPC errors, not crashes"
    let e1 be mcp({"method": "tools/call", "id": 4, "params": {"name": "nope", "arguments": {}}}, ADMIN)
    assert_eq(e1["error"]["code"], 0 - 32602)
    let e2 be mcp({"method": "resources/list", "id": 5}, ADMIN)
    assert_eq(e2["error"]["code"], 0 - 32601)

test "a call without arguments is a JSON-RPC error, not a crash"
    let e be mcp({"method": "tools/call", "id": 6, "params": {"name": "table_rows"}}, MARIA)
    assert_eq(e["error"]["code"], 0 - 32602)

test "a notification gets no answer"
    assert_eq(mcp({"jsonrpc": "2.0", "method": "notifications/initialized"}, MARIA), nothing)