v1.4.3 - SQL Parameter Quoting Fix

Changes

Bug Fixes

• SQL parameter quoting: String parameters in custom tools are now properly quoted and escaped for SQL safety
• Custom tools registration: Fixed custom tools not registering in foreground stdio mode
• CI workflow: Updated for DuckDB v1.4.4

Details

Custom SQL tools defined with mcp_publish_tool() now correctly handle string parameters. Previously, string values were substituted literally without SQL quoting, causing syntax errors.

Example:

-- Tool template
SELECT file FROM glob($pattern)

-- Before: SELECT file FROM glob(/path/to/files)  -- Syntax error!
-- After:  SELECT file FROM glob('/path/to/files') -- Correct

Full changelog: v1.3.2...v1.4.3