@tacuchi/agent-workflow-cli 23.0.0 → 24.0.0

package/README.md

@@ -124,10 +124,46 @@ Running `agent-workflow` (or `aw`) with no arguments opens the tab-based TUI:
 | **Status** | Doctor dashboard: CLI / hosts / hooks / MCP tiles + daily operational logs. The hosts tile jumps to [Workline]. |
 | **Workline** | Per-host administration of the bundled `w` SKILL (install / reinstall / uninstall, `hooks armed` state) plus a compact flows overview. |
 | **Project** | Workspace sources, branches and git-flow actions. |
-| **MCP** | dbhub connections. `mcp-connections.json` is the only authority for connection names and exact DSN variables: register with `aw self mcp use-env --name alpha --dsn-var ALPHA_DATABASE_URL`. Direct MCP operations select the sole connection, require `--instance <name>` when several exist, or use an explicit `--all-connections` fan-out. **Install writes the host's user-scope config** (e.g. `~/.claude.json`, `~/.codex/config.toml`) — never the project `.mcp.json`; `aw mcp setup` remains the workspace-capable path (workspace by default; `--workspace <dir>` / `--global --force`). |
+| **MCP** | Tools PostgreSQL de solo lectura. `mcp-connections.json` v2 es la única autoridad de alias, provider y variable DSN: registrá con `aw self mcp use-env --name alpha --dsn-var ALPHA_DATABASE_URL`. La TUI instala descriptores absolutos en user scope; `aw mcp setup` conserva además el modo workspace portable dependiente de `PATH`. Cada host muestra configuración, launchability, recarga pendiente y carga observada; Codex queda opcional porque existe el fallback local `aw tool call`. |
 | **Skills** | Standalone third-party skills manager (skills.sh model): register from `owner/repo`, a git URL (`#ref` supported) or an absolute local path; install materializes a canonical copy in `~/.agents/skills/<name>` (the open-standard dir every non-Claude host scans) plus a symlink replica in `~/.claude/skills/<name>` (copy fallback where symlinks are unavailable). Seeded with the recommended external skills from the companion marketplace README — keep both lists in sync. |
 | **Config** | Namespace, host-targeting preferences, and the workspace branch defaults (written to the WORKSPACE block). |
 
+### PostgreSQL MCP y fallback local
+
+V1 publica sólo `execute_sql` y `search_objects` para PostgreSQL. Ambas rutas usan el
+mismo catálogo y el mismo JSON canónico: el servidor MCP devuelve ese JSON en
+`content[0].text`, y el CLI lo imprime directamente, sin el envelope general.
+
+```sh
+aw tool list --connection qtc-cert
+aw tool call execute_sql --connection qtc-cert --input-json '{"sql":"SELECT 1"}'
+printf '%s' '{"object_type":"table","pattern":"user%"}' \
+  | aw tool call search_objects --connection qtc-cert --input-json -
+```
+
+`execute_sql` acepta una sola sentencia de lectura y ejecuta cada llamada en una conexión
+nueva, transacción `READ ONLY`, timeout de 30 s y rollback final. El resultado se limita a
+1.000 filas y 4 MiB; la entrada JSON se limita a 1 MiB. Nunca pongas un DSN, SQL ni resultados
+en los archivos de host, recibos u logs operativos.
+
+`search_objects` conserva el envelope de DBHub 1.2.1: `object_type`, `pattern`, filtros
+opcionales, `detail_level`, `count`, `results` y `truncated`. Sus siete tipos y tres niveles
+mantienen los campos de descubrimiento de DBHub; `truncated` sólo vale `true` cuando se observó
+una fila adicional que quedó fuera del límite.
+
+`READ ONLY` no reemplaza una cuenta PostgreSQL de mínimo privilegio: no uses superuser, permisos
+de escritura/creación, ni membresía o vía `SET ROLE` hacia `pg_signal_backend`,
+`pg_signal_autovacuum_worker`, `pg_read_server_files`, `pg_write_server_files` o
+`pg_execute_server_program`. El ejecutor rechaza superuser y esos roles de servidor; con
+`aw mcp doctor --probe data`, los demás privilegios de escritura se informan como advertencia y la
+conexión no queda marcada como segura. Tampoco concedas `EXECUTE` sobre extensiones o funciones con
+efectos externos.
+
+`aw mcp serve-db --instance <nombre>` es el servidor stdio; `aw mcp dbhub` sigue durante una
+versión como alias deprecado. `aw mcp doctor --probe launch` comprueba `initialize → initialized
+→ tools/list`; `--probe data` añade `SELECT 1 AS ok`. `aw mcp migrate` sólo muestra preview;
+escribir requiere `--apply --force` y no se ejecuta automáticamente.
+
 ## Namespace resolution
 
 Workspace artifacts live under `.<namespace>/`. Resolution order (first match wins):

package/dist/adapters/postgres-readonly-tools.js

@@ -0,0 +1,277 @@
+import { Client } from "pg";
+import Cursor from "pg-cursor";
+import { MAX_TOOL_RESULT_BYTES, MAX_TOOL_ROWS } from "../domain/database-tools.js";
+import { PostgresToolError } from "../ports/postgres-tools.js";
+const CONNECTION_TIMEOUT_MS = 10_000;
+const STATEMENT_TIMEOUT_MS = 30_000;
+/**
+ * The PostgreSQL adapter owns the safety envelope for every catalog call:
+ * connection lifetime, transaction read-only state, timeout, bounded rows and
+ * disposal. It never returns a driver error or DSN to the caller.
+ */
+export class PostgresReadonlyTools {
+    async execute(sql, dsn, options = {}) {
+        return await this.withReadonlyClient(dsn, async (client) => await readBoundedCursor(client, sql, [], options.signal), ...(options.signal === undefined ? [] : [{ signal: options.signal }]));
+    }
+    async query(sql, values, dsn, options = {}) {
+        return await this.withReadonlyClient(dsn, async (client) => await readBoundedCursor(client, sql, values, options.signal), ...(options.signal === undefined ? [] : [{ signal: options.signal }]));
+    }
+    async inspectRole(dsn) {
+        return await this.withReadonlyClient(dsn, async (client) => {
+            const result = await client.query(`SELECT
+           r.rolsuper AS superuser,
+           r.rolcreaterole AS can_create_role,
+           r.rolcreatedb AS can_create_database,
+           (
+             has_database_privilege(current_database(), 'CREATE')
+             OR EXISTS (
+               SELECT 1 FROM pg_namespace n
+               WHERE has_schema_privilege(n.oid, 'CREATE')
+             )
+             OR EXISTS (
+               SELECT 1 FROM pg_class c
+               WHERE c.relkind IN ('r', 'p', 'v', 'm', 'f')
+                 AND (
+                   has_table_privilege(c.oid, 'INSERT, UPDATE, DELETE, TRUNCATE')
+                   OR has_any_column_privilege(c.oid, 'INSERT, UPDATE')
+                 )
+             )
+             OR EXISTS (
+               SELECT 1 FROM pg_class sequence_class
+               WHERE sequence_class.relkind = 'S'
+                 AND has_sequence_privilege(sequence_class.oid, 'UPDATE')
+             )
+           ) AS can_write,
+           COALESCE(
+             (
+               SELECT bool_or(
+                 pg_has_role(current_user, dangerous_role.oid, 'USAGE')
+                 OR pg_has_role(current_user, dangerous_role.oid, 'MEMBER')
+               )
+               FROM pg_roles dangerous_role
+               WHERE dangerous_role.rolname IN (
+                 'pg_signal_backend',
+                 'pg_signal_autovacuum_worker',
+                 'pg_read_server_files',
+                 'pg_write_server_files',
+                 'pg_execute_server_program'
+               )
+             ),
+             false
+           ) AS unsafe_server_role
+         FROM pg_roles r
+         WHERE r.rolname = current_user`);
+            const role = result.rows[0];
+            if (role === undefined) {
+                throw new PostgresToolError("DATABASE_ROLE_UNKNOWN", "No se pudo verificar el rol PostgreSQL.");
+            }
+            return {
+                superuser: role.superuser,
+                canCreateRole: role.can_create_role,
+                canCreateDatabase: role.can_create_database,
+                canWrite: role.can_write,
+                unsafeServerRole: role.unsafe_server_role,
+                transactionReadOnly: true,
+            };
+        }, { allowSuperuser: true });
+    }
+    async withReadonlyClient(dsn, work, options = {}) {
+        const client = new Client({
+            connectionString: dsn,
+            connectionTimeoutMillis: CONNECTION_TIMEOUT_MS,
+            statement_timeout: STATEMENT_TIMEOUT_MS,
+        });
+        // A connected pg client can emit a later socket error after rejecting the
+        // active query. Keep it from becoming an unhandled EventEmitter error; the
+        // awaited operation below still maps it to a secret-free tool failure.
+        client.on("error", () => { });
+        let transactionStarted = false;
+        let connected = false;
+        const abort = () => {
+            // Calls use an isolated client, so destroying it is a reliable PostgreSQL
+            // cancellation mechanism. It avoids `pg`'s `Client.cancel` trap, whose
+            // receiver must be a separate control client and can otherwise corrupt
+            // the active connection. The server rolls the read-only transaction back.
+            void client.end().catch(() => undefined);
+        };
+        if (options.signal?.aborted)
+            throw queryCancelled();
+        options.signal?.addEventListener("abort", abort, { once: true });
+        try {
+            await client.connect();
+            connected = true;
+            await client.query("SET default_transaction_read_only = on");
+            await client.query("BEGIN READ ONLY");
+            transactionStarted = true;
+            const readOnly = await client.query("SHOW transaction_read_only");
+            if (readOnly.rows[0]?.transaction_read_only !== "on") {
+                throw new PostgresToolError("READ_ONLY_POLICY", "PostgreSQL no confirmó una transacción de solo lectura.");
+            }
+            if (!options.allowSuperuser)
+                await rejectUnsafeExecutionRole(client);
+            await client.query("SET LOCAL statement_timeout = '30s'");
+            return await work(client);
+        }
+        catch (error) {
+            if (options.signal?.aborted)
+                throw queryCancelled();
+            if (error instanceof PostgresToolError)
+                throw error;
+            throw safeDriverError(error, connected);
+        }
+        finally {
+            options.signal?.removeEventListener("abort", abort);
+            // An abort tears down this per-call socket, which makes PostgreSQL roll
+            // the transaction back itself. Do not issue a query or wait for cursor
+            // cleanup on a connection that intentionally cannot become ready again.
+            if (transactionStarted && !options.signal?.aborted) {
+                await client.query("ROLLBACK").catch(() => undefined);
+            }
+            await client.end().catch(() => undefined);
+        }
+    }
+}
+async function readBoundedCursor(client, sql, values, signal) {
+    if (signal?.aborted)
+        throw queryCancelled();
+    const cursor = client.query(new Cursor(sql, [...values]));
+    const cancel = () => {
+        // `withReadonlyClient` also observes this signal during connection/setup.
+        // Keep the cursor listener so a live read is terminated immediately.
+        void client.end().catch(() => undefined);
+    };
+    signal?.addEventListener("abort", cancel, { once: true });
+    let closeCursor = true;
+    try {
+        return await readCursorRows(cursor, signal);
+    }
+    catch (error) {
+        closeCursor = closesActiveCursorAfter(error);
+        if (signal?.aborted)
+            throw queryCancelled();
+        throw error;
+    }
+    finally {
+        signal?.removeEventListener("abort", cancel);
+        // pg-cursor close waits for ReadyForQuery. After explicit cancellation the
+        // isolated client socket was destroyed, so waiting here would turn a
+        // successful cancel into a hung finally; the client teardown owns cleanup.
+        // pg-cursor sends ReadyForQuery itself after a query error. Calling close
+        // after its read promise rejects can subscribe too late and wait forever
+        // for a second ReadyForQuery. The isolated transaction rollback below owns
+        // cleanup in that case; close only when the portal still needs a Close +
+        // Sync (normal completion or a local size-bound rejection).
+        if (!signal?.aborted && closeCursor)
+            await cursor.close().catch(() => undefined);
+    }
+}
+function closesActiveCursorAfter(error) {
+    // A result-size rejection originates locally while the cursor portal is
+    // still active, so Close + Sync is required before ROLLBACK can proceed.
+    // PostgreSQL errors already emitted their own Sync; closing then can wait for
+    // a second ReadyForQuery that never arrives.
+    return error instanceof PostgresToolError && error.code === "RESULT_TOO_LARGE";
+}
+function queryCancelled() {
+    return new PostgresToolError("QUERY_CANCELLED", "La consulta fue cancelada.");
+}
+async function rejectUnsafeExecutionRole(client) {
+    const result = await client.query(`SELECT
+       role_info.rolsuper AS superuser,
+       COALESCE(
+         (
+           SELECT bool_or(
+             pg_has_role(current_user, dangerous_role.oid, 'USAGE')
+             OR pg_has_role(current_user, dangerous_role.oid, 'MEMBER')
+           )
+           FROM pg_roles dangerous_role
+           WHERE dangerous_role.rolname IN (
+             'pg_signal_backend',
+             'pg_signal_autovacuum_worker',
+             'pg_read_server_files',
+             'pg_write_server_files',
+             'pg_execute_server_program'
+           )
+         ),
+         false
+       ) AS unsafe_server_role
+     FROM pg_roles role_info
+     WHERE role_info.rolname = current_user`);
+    const role = result.rows[0];
+    if (role === undefined) {
+        throw new PostgresToolError("DATABASE_ROLE_UNKNOWN", "No se pudo verificar la seguridad del rol PostgreSQL.");
+    }
+    if (role.superuser) {
+        throw new PostgresToolError("DATABASE_ROLE_UNSAFE", "La ejecución de tools requiere un rol PostgreSQL que no sea superusuario.");
+    }
+    if (role.unsafe_server_role) {
+        throw new PostgresToolError("DATABASE_ROLE_UNSAFE", "La ejecución de tools requiere un rol sin privilegios de servidor peligrosos.");
+    }
+}
+async function readCursorRows(cursor, signal) {
+    const rows = [];
+    // Track the JSON representation as rows arrive. `DatabaseToolCatalog` makes
+    // the final exact 4 MiB decision once it adds the canonical envelope, while
+    // this transport-level bound prevents a 1001-row cursor result from being
+    // accumulated in memory first.
+    let serializedBytes = 2; // []
+    while (rows.length <= MAX_TOOL_ROWS) {
+        const batch = await cursor.read(1);
+        if (signal?.aborted)
+            throw queryCancelled();
+        const row = batch[0];
+        if (row === undefined)
+            return { rows, truncated: false };
+        if (rows.length === MAX_TOOL_ROWS)
+            return { rows, truncated: true };
+        serializedBytes += serializedRowBytes(row) + (rows.length === 0 ? 0 : 1);
+        if (serializedBytes > MAX_TOOL_RESULT_BYTES) {
+            throw new PostgresToolError("RESULT_TOO_LARGE", "El resultado serializado supera 4 MiB.");
+        }
+        rows.push(row);
+    }
+    return { rows, truncated: true };
+}
+function serializedRowBytes(row) {
+    try {
+        return Buffer.byteLength(JSON.stringify(row), "utf8");
+    }
+    catch {
+        throw new PostgresToolError("RESULT_TOO_LARGE", "El resultado no se puede serializar de forma segura.");
+    }
+}
+function safeDriverError(error, connected) {
+    const code = readDriverCode(error);
+    if (!connected) {
+        return new PostgresToolError("DATABASE_CONNECTION_FAILED", "No se pudo abrir la conexión PostgreSQL.");
+    }
+    if (code === "42601") {
+        return new PostgresToolError("INVALID_SQL", "La consulta PostgreSQL tiene sintaxis inválida.");
+    }
+    if (code === "57014") {
+        return new PostgresToolError("QUERY_TIMEOUT", "La consulta excedió el límite de 30 segundos.");
+    }
+    if (code === "25006") {
+        return new PostgresToolError("READ_ONLY_POLICY", "PostgreSQL rechazó una operación fuera de la transacción de solo lectura.");
+    }
+    if (code?.startsWith("28") || code === "3D000") {
+        return new PostgresToolError("DATABASE_CONNECTION_FAILED", "No se pudo autenticar o abrir la base de datos.");
+    }
+    if (code === "ECONNREFUSED" ||
+        code === "ECONNRESET" ||
+        code === "ENETUNREACH" ||
+        code === "EHOSTUNREACH" ||
+        code === "ENOTFOUND" ||
+        code === "ETIMEDOUT" ||
+        code === "ERR_INVALID_URL") {
+        return new PostgresToolError("DATABASE_CONNECTION_FAILED", "No se pudo abrir la conexión PostgreSQL.");
+    }
+    return new PostgresToolError("DATABASE_QUERY_FAILED", "PostgreSQL no pudo completar la operación.");
+}
+function readDriverCode(error) {
+    if (error === null || typeof error !== "object")
+        return undefined;
+    const code = error.code;
+    return typeof code === "string" ? code : undefined;
+}
+//# sourceMappingURL=postgres-readonly-tools.js.map

package/dist/adapters/postgres-readonly-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-readonly-tools.js","sourceRoot":"","sources":["../../src/adapters/postgres-readonly-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAOnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC;;;;GAIG;AACH,MAAM,OAAO,qBAAqB;IAChC,KAAK,CAAC,OAAO,CACX,GAAW,EACX,GAAW,EACX,UAAgC,EAAE;QAElC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAClC,GAAG,EACH,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,EAC1E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,GAAW,EACX,MAA0B,EAC1B,GAAW,EACX,UAAgC,EAAE;QAElC,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAClC,GAAG,EACH,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAC9E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAClC,GAAG,EACH,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAO/B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA0C8B,CAC/B,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,yCAAyC,CAC1C,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,IAAI,CAAC,eAAe;gBACnC,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;gBAC3C,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,gBAAgB,EAAE,IAAI,CAAC,kBAAkB;gBACzC,mBAAmB,EAAE,IAAI;aAC1B,CAAC;QACJ,CAAC,EACD,EAAE,cAAc,EAAE,IAAI,EAAE,CACzB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,GAAW,EACX,IAAoC,EACpC,UAAiC,EAAE;QAEnC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,gBAAgB,EAAE,GAAG;YACrB,uBAAuB,EAAE,qBAAqB;YAC9C,iBAAiB,EAAE,oBAAoB;SACxC,CAAC,CAAC;QACH,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7B,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,0EAA0E;YAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,cAAc,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACtC,kBAAkB,GAAG,IAAI,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,4BAA4B,CAC7B,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,qBAAqB,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,IAAI,iBAAiB,CACzB,kBAAkB,EAClB,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,cAAc;gBAAE,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;YACrE,MAAM,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC1D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,cAAc,EAAE,CAAC;YACpD,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,MAAM,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,IAAI,kBAAkB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACnD,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,GAAW,EACX,MAA0B,EAC1B,MAA+B;IAE/B,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,cAAc,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAA0B,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,0EAA0E;QAC1E,qEAAqE;QACrE,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,cAAc,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,2EAA2E;QAC3E,qEAAqE;QACrE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,4DAA4D;QAC5D,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,WAAW;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,wEAAwE;IACxE,yEAAyE;IACzE,8EAA8E;IAC9E,6CAA6C;IAC7C,OAAO,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC;AACjF,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;AAChF,CAAC;AAQD,KAAK,UAAU,yBAAyB,CAAC,MAAc;IACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B;;;;;;;;;;;;;;;;;;;;4CAoBwC,CACzC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAuC,EACvC,MAA+B;IAE/B,MAAM,IAAI,GAA8B,EAAE,CAAC;IAC3C,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,+BAA+B;IAC/B,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,KAAK;IAC9B,OAAO,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,cAAc,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACpE,eAAe,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,eAAe,GAAG,qBAAqB,EAAE,CAAC;YAC5C,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B;IACtD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CACzB,kBAAkB,EAClB,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,SAAkB;IACzD,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,iBAAiB,CAC1B,4BAA4B,EAC5B,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,iBAAiB,CAAC,aAAa,EAAE,iDAAiD,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,iBAAiB,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,iBAAiB,CAC1B,kBAAkB,EAClB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/C,OAAO,IAAI,iBAAiB,CAC1B,4BAA4B,EAC5B,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IACE,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,iBAAiB,EAC1B,CAAC;QACD,OAAO,IAAI,iBAAiB,CAC1B,4BAA4B,EAC5B,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,iBAAiB,CAC1B,uBAAuB,EACvB,4CAA4C,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC"}

package/dist/application/database-mcp-server.js

@@ -0,0 +1,168 @@
+import { encodeToolResponse, toolFailure } from "../domain/database-tools.js";
+const PROTOCOL_VERSION = "2025-06-18";
+/** JSON-RPC adapter over the shared catalog. It owns no tool rules. */
+export function createDatabaseMcpServer(deps) {
+    let lifecycle = "new";
+    const activeCalls = new Map();
+    const cancelledBeforeStart = new Set();
+    function reply(id, result) {
+        if (!isJsonRpcResponseId(id))
+            return;
+        deps.send({ jsonrpc: "2.0", id, result });
+    }
+    function replyError(id, code, message) {
+        if (!isJsonRpcResponseId(id))
+            return;
+        deps.send({ jsonrpc: "2.0", id, error: { code, message } });
+    }
+    function toolResult(response) {
+        return {
+            content: [{ type: "text", text: encodeToolResponse(response), mimeType: "application/json" }],
+            ...(response.success ? {} : { isError: true }),
+        };
+    }
+    async function dispatchToolCall(message) {
+        const params = isRecord(message.params) ? message.params : {};
+        const name = typeof params.name === "string" ? params.name : "";
+        const requestKey = requestIdKey(message.id);
+        // tools/call is a request, not a notification. Rejecting an id-less call
+        // prevents an untracked database operation that the client cannot cancel.
+        if (requestKey === undefined) {
+            replyError(message.id, -32600, "tools/call requiere un id de solicitud válido");
+            return true;
+        }
+        if (cancelledBeforeStart.delete(requestKey)) {
+            reply(message.id, toolResult(toolFailure("QUERY_CANCELLED", "La consulta fue cancelada.")));
+            return true;
+        }
+        const controller = new AbortController();
+        activeCalls.set(requestKey, controller);
+        try {
+            const outcome = await deps.catalog.call({
+                tool: name,
+                connection: deps.connection,
+                input: params.arguments,
+                signal: controller.signal,
+            });
+            reply(message.id, toolResult(outcome.response));
+        }
+        catch {
+            reply(message.id, toolResult(toolFailure("TOOL_EXECUTION_FAILED", "La tool no pudo completar la solicitud.")));
+        }
+        finally {
+            if (activeCalls.get(requestKey) === controller) {
+                activeCalls.delete(requestKey);
+            }
+        }
+        return true;
+    }
+    async function cancelToolCall(message) {
+        const params = isRecord(message.params) ? message.params : {};
+        const key = requestIdKey(params.requestId);
+        if (key === undefined)
+            return true;
+        const active = activeCalls.get(key);
+        if (active !== undefined) {
+            active.abort();
+            return true;
+        }
+        // A stdio transport may receive cancellation while an earlier call keeps a
+        // later request queued. Retain bounded intent so that later call never
+        // reaches PostgreSQL once it starts.
+        cancelledBeforeStart.add(key);
+        if (cancelledBeforeStart.size > 1_000) {
+            const oldest = cancelledBeforeStart.values().next().value;
+            if (oldest !== undefined)
+                cancelledBeforeStart.delete(oldest);
+        }
+        return true;
+    }
+    async function initialize(message) {
+        if (lifecycle !== "new") {
+            replyError(message.id, -32600, "initialize sólo puede llamarse una vez por sesión");
+            return true;
+        }
+        lifecycle = "awaiting-initialized";
+        reply(message.id, {
+            protocolVersion: PROTOCOL_VERSION,
+            capabilities: { tools: {} },
+            serverInfo: { name: "agent-workflow-db", version: "1" },
+        });
+        return true;
+    }
+    async function initialized() {
+        if (lifecycle === "awaiting-initialized") {
+            lifecycle = "ready";
+            await deps.onHostLoadObserved?.();
+        }
+        return true;
+    }
+    function readyOrReply(message) {
+        if (lifecycle === "ready")
+            return true;
+        replyError(message.id, -32002, "Server not initialized");
+        return false;
+    }
+    async function listTools(message) {
+        if (!readyOrReply(message))
+            return true;
+        try {
+            const list = deps.catalog.list(deps.connection);
+            reply(message.id, "tools" in list.payload ? list.payload : toolResult(list.payload));
+        }
+        catch {
+            reply(message.id, toolResult(toolFailure("MCP_CONNECTION_INVALID", "No se pudo resolver la conexión solicitada.")));
+        }
+        return true;
+    }
+    async function callTool(message) {
+        if (!readyOrReply(message))
+            return true;
+        return await dispatchToolCall(message);
+    }
+    const handlers = {
+        initialize,
+        "notifications/initialized": async () => await initialized(),
+        "notifications/cancelled": async (message) => await cancelToolCall(message),
+        "tools/list": listTools,
+        "tools/call": callTool,
+    };
+    return {
+        async handle(message) {
+            if (!isJsonRpcEnvelope(message))
+                return false;
+            const handler = handlers[message.method];
+            if (handler !== undefined)
+                return await handler(message);
+            replyError(message.id, -32601, "Method not found");
+            return true;
+        },
+    };
+}
+/** Accept only envelopes for which every response remains valid JSON-RPC. */
+function isJsonRpcEnvelope(value) {
+    return (isRecord(value) &&
+        value.jsonrpc === "2.0" &&
+        typeof value.method === "string" &&
+        isJsonRpcId(value.id));
+}
+function isJsonRpcId(value) {
+    return value === undefined || isJsonRpcResponseId(value);
+}
+function isJsonRpcResponseId(value) {
+    return value === null || typeof value === "string" || isFiniteId(value);
+}
+function isFiniteId(value) {
+    return typeof value === "number" && Number.isFinite(value);
+}
+function requestIdKey(value) {
+    if (typeof value === "string")
+        return `string:${value}`;
+    if (typeof value === "number" && Number.isFinite(value))
+        return `number:${value}`;
+    return undefined;
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+//# sourceMappingURL=database-mcp-server.js.map

package/dist/application/database-mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database-mcp-server.js","sourceRoot":"","sources":["../../src/application/database-mcp-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,kBAAkB,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAGjG,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAmBtC,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,IAAI,SAAS,GAA6C,KAAK,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/C,SAAS,KAAK,CAAC,EAAW,EAAE,MAAe;QACzC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,SAAS,UAAU,CAAC,EAAW,EAAE,IAAY,EAAE,OAAe;QAC5D,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,SAAS,UAAU,CAAC,QAAsB;QACxC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;YAC7F,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,OAAgC;QAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,+CAA+C,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5C,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAwB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3D,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CACH,OAAO,CAAC,EAAE,EACV,UAAU,CAAC,WAAW,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC,CAC5F,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC/C,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,OAAgC;QAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,qCAAqC;QACrC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,oBAAoB,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC1D,IAAI,MAAM,KAAK,SAAS;gBAAE,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,OAAgC;QACxD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,mDAAmD,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,GAAG,sBAAsB,CAAC;QACnC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;YAChB,eAAe,EAAE,gBAAgB;YACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,EAAE;SACxD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,WAAW;QACxB,IAAI,SAAS,KAAK,sBAAsB,EAAE,CAAC;YACzC,SAAS,GAAG,OAAO,CAAC;YACpB,MAAM,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,YAAY,CAAC,OAAgC;QACpD,IAAI,SAAS,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACvC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,OAAgC;QACvD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChD,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CACH,OAAO,CAAC,EAAE,EACV,UAAU,CACR,WAAW,CAAC,wBAAwB,EAAE,6CAA6C,CAAC,CACrF,CACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,OAAgC;QACtD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAA2E;QACvF,UAAU;QACV,2BAA2B,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,WAAW,EAAE;QAC5D,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC;QAC3E,YAAY,EAAE,SAAS;QACvB,YAAY,EAAE,QAAQ;KACvB,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,OAAgB;YAC3B,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,OAAO,KAAK,KAAK;QACvB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,SAAS,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,KAAK,EAAE,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,KAAK,EAAE,CAAC;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/application/database-mcp-stdio.js

@@ -0,0 +1,137 @@
+import { StringDecoder } from "node:string_decoder";
+import { MAX_TOOL_TRANSPORT_INPUT_BYTES } from "../domain/database-tools.js";
+import { createDatabaseMcpServer } from "./database-mcp-server.js";
+// The RPC envelope is allowed a small fixed overhead beyond the canonical 1
+// MiB tool input. The shared catalog still makes the exact input decision.
+const MAX_MCP_INPUT_FRAME_BYTES = MAX_TOOL_TRANSPORT_INPUT_BYTES;
+/**
+ * Line-framed stdio transport. stdout is exclusively JSON-RPC; malformed input
+ * is diagnosed on stderr and cannot corrupt a later valid request.
+ */
+export function runDatabaseMcpStdio(deps) {
+    const server = createDatabaseMcpServer({
+        send: (message) => deps.output.write(`${JSON.stringify(message)}\n`),
+        catalog: deps.catalog,
+        connection: deps.connection,
+        ...(deps.onHostLoadObserved === undefined
+            ? {}
+            : { onHostLoadObserved: deps.onHostLoadObserved }),
+    });
+    const frames = {
+        buffer: "",
+        bufferedBytes: 0,
+        discardingOversizedLine: false,
+        decoder: new StringDecoder("utf8"),
+    };
+    let queue = Promise.resolve();
+    function enqueue(line) {
+        let message;
+        try {
+            message = JSON.parse(line);
+        }
+        catch {
+            deps.diagnostics.write("aw mcp serve-db: línea JSON-RPC inválida descartada\n");
+            return;
+        }
+        // Cancellation must not wait behind a running database call in the serial
+        // queue. All other frames retain order, including the lifecycle sequence.
+        if (isCancellationNotification(message)) {
+            void server.handle(message).catch(() => {
+                deps.diagnostics.write("aw mcp serve-db: línea JSON-RPC inválida descartada\n");
+            });
+            return;
+        }
+        queue = queue.then(async () => {
+            try {
+                await server.handle(message);
+            }
+            catch {
+                deps.diagnostics.write("aw mcp serve-db: línea JSON-RPC inválida descartada\n");
+            }
+        });
+    }
+    return new Promise((resolve) => {
+        let ended = false;
+        const finish = () => {
+            if (ended)
+                return;
+            ended = true;
+            // An unterminated tail is not a JSON-RPC frame. Do not enqueue it, but
+            // flush the decoder so no multibyte bytes remain retained by the stream.
+            if (!frames.discardingOversizedLine)
+                frames.buffer += frames.decoder.end();
+            void queue.then(() => resolve());
+        };
+        deps.input.on("data", (chunk) => {
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            enqueueConsumption(consumeChunk(frames, bytes), deps, enqueue);
+        });
+        deps.input.on("end", finish);
+        deps.input.on("close", finish);
+    });
+}
+function isCancellationNotification(message) {
+    return (message !== null &&
+        typeof message === "object" &&
+        !Array.isArray(message) &&
+        message.method === "notifications/cancelled");
+}
+/**
+ * Splits raw bytes at newline boundaries before decoding. This matters for an
+ * oversized frame already terminated in the same chunk: appending/splitting a
+ * decoded 100 MiB string merely to reject it would defeat the input bound.
+ */
+function consumeChunk(state, bytes) {
+    const frames = [];
+    let oversizedFrames = 0;
+    let offset = 0;
+    while (offset < bytes.length) {
+        const newline = bytes.indexOf(0x0a, offset);
+        const end = newline < 0 ? bytes.length : newline + 1;
+        const segment = bytes.subarray(offset, end);
+        if (state.discardingOversizedLine) {
+            if (newline >= 0) {
+                state.discardingOversizedLine = false;
+                state.decoder = new StringDecoder("utf8");
+            }
+            offset = end;
+            continue;
+        }
+        if (state.bufferedBytes + segment.length > MAX_MCP_INPUT_FRAME_BYTES) {
+            state.buffer = "";
+            state.bufferedBytes = 0;
+            state.decoder = new StringDecoder("utf8");
+            state.discardingOversizedLine = newline < 0;
+            oversizedFrames += 1;
+            offset = end;
+            continue;
+        }
+        state.bufferedBytes += segment.length;
+        state.buffer += state.decoder.write(segment);
+        if (newline >= 0)
+            consumeCompleteLine(state, frames);
+        offset = end;
+    }
+    return { frames, oversizedFrames };
+}
+function consumeCompleteLine(state, frames) {
+    const newline = state.buffer.indexOf("\n");
+    if (newline < 0)
+        return;
+    const trimmed = state.buffer.slice(0, newline).replace(/\r$/, "").trim();
+    state.buffer = state.buffer.slice(newline + 1);
+    state.bufferedBytes = 0;
+    if (trimmed.length > 0)
+        frames.push(trimmed);
+}
+function reportOversizedFrames(output, count) {
+    for (let index = 0; index < count; index += 1) {
+        output.write("aw mcp serve-db: frame JSON-RPC demasiado grande descartado\n");
+    }
+}
+function enqueueConsumption(consumed, deps, enqueue) {
+    reportOversizedFrames(deps.diagnostics, consumed.oversizedFrames);
+    for (const frame of consumed.frames)
+        enqueue(frame);
+}
+//# sourceMappingURL=database-mcp-stdio.js.map