Add validation for Cosmos query command

[xiangyan99]

What does this PR do?

[Provide a clear, concise description of the changes]

CosmosDB SQL has only SELECT statements based on the grammar. However, stored procs and triggers can be used to modify documents. Here's a reference: https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/how-to-write-stored-procedures-triggers-udfs?tabs=javascript

based on this, we add validation to block just those patterns.

[Any additional context, screenshots, or information that helps reviewers]

GitHub issue number?

[Link to the GitHub issue this PR addresses]

https://github.com/microsoft/mcp-pr/issues/10

Pre-merge Checklist

• Required for All PRs
  • Read contribution guidelines
  • PR title clearly describes the change
  • Commit history is clean with descriptive messages (cleanup guide)
  • Added comprehensive tests for new/modified functionality
  • Updated servers/Azure.Mcp.Server/CHANGELOG.md and/or servers/Fabric.Mcp.Server/CHANGELOG.md for product changes (features, bug fixes, UI/UX, updated dependencies)
• For MCP tool changes:
  • One tool per PR: This PR adds or modifies only one MCP tool for faster review cycles
  • Updated servers/Azure.Mcp.Server/README.md and/or servers/Fabric.Mcp.Server/README.md documentation
  • Updated command list in /docs/azmcp-commands.md and/or /docs/fabric-commands.md
  • For new or modified tool descriptions, ran ToolDescriptionEvaluator and obtained a score of 0.4 or more and a top 3 ranking for all related test prompts
• Extra steps for Azure MCP Server tool changes:
  • Updated test prompts in /docs/e2eTestPrompts.md
  • 👉 For Community (non-Microsoft team member) PRs:
    • Security review: Reviewed code for security vulnerabilities, malicious code, or suspicious activities before running tests (crypto mining, spam, data exfiltration, etc.)
    • Manual tests run: added comment /azp run mcp - pullrequest - live to run Live Test Pipeline

[Copilot]

Pull Request Overview

This PR adds validation for Cosmos DB query commands to ensure only safe, read-only SELECT statements can be executed. The validation prevents execution of potentially dangerous SQL operations like INSERT, UPDATE, DELETE, and DDL statements.

Key changes:

• Implements a comprehensive CosmosQueryValidator class with security-focused query validation
• Integrates validation into the ItemQueryCommand to validate user-provided queries
• Adds extensive unit tests covering various query scenarios and edge cases

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File	Description
tools/Azure.Mcp.Tools.Cosmos/src/Validation/CosmosQueryValidator.cs	New validator class that ensures only safe SELECT queries are allowed
tools/Azure.Mcp.Tools.Cosmos/src/Commands/ItemQueryCommand.cs	Integrates query validation for user-provided queries while skipping validation for default queries
tools/Azure.Mcp.Tools.Cosmos/tests/Azure.Mcp.Tools.Cosmos.UnitTests/CosmosQueryValidatorTests.cs	Comprehensive test suite covering valid queries, security threats, and edge cases
servers/Azure.Mcp.Server/CHANGELOG.md	Documents the addition of query validation feature

[xiangyan99]

/check-enforcer reset

[scbedd]

/azp run mcp - pullrequest

[scbedd]

/azp run mcp - pullrequest - live

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).