@tacuchi/agent-workflow-cli 23.0.0 → 24.0.0

package/dist/domain/postgres-object-search.js

@@ -0,0 +1,320 @@
+const EXCLUDED_SCHEMAS = "'pg_catalog', 'information_schema', 'pg_toast'";
+/**
+ * Builds the PostgreSQL equivalents of DBHub 1.2.1's object discovery
+ * queries. All user-provided filters remain placeholders; the only SQL text
+ * selected here comes from the closed tool schema.
+ */
+export function buildPostgresObjectSearchQuery(input) {
+    switch (input.object_type) {
+        case "schema":
+            return schemaQuery(input);
+        case "table":
+            return relationQuery(input, "table");
+        case "view":
+            return relationQuery(input, "view");
+        case "column":
+            return columnQuery(input);
+        case "procedure":
+            return routineQuery(input, "procedure");
+        case "function":
+            return routineQuery(input, "function");
+        case "index":
+            return indexQuery(input);
+    }
+}
+/**
+ * `pg` maps nullable catalog columns to null, while DBHub omits optional
+ * comment/description/routine fields. Keep required nullable fields such as
+ * `row_count` and `default` intact so the public shape stays compatible.
+ */
+export function normalizePostgresObjectSearchRows(_input, rows) {
+    return rows.map((row) => {
+        const normalized = { ...row };
+        dropOptional(normalized, "comment");
+        dropOptional(normalized, "description");
+        dropOptional(normalized, "return_type");
+        dropOptional(normalized, "definition");
+        return normalized;
+    });
+}
+function dropOptional(row, field) {
+    const value = row[field];
+    if (value === null || value === undefined || value === "")
+        delete row[field];
+}
+function schemaQuery(input) {
+    if (input.detail_level === "names") {
+        return {
+            sql: `SELECT schema_info.schema_name AS name
+            FROM information_schema.schemata schema_info
+            WHERE schema_info.schema_name NOT IN (${EXCLUDED_SCHEMAS})
+              AND schema_info.schema_name ILIKE $1
+            ORDER BY schema_info.schema_name ASC
+            LIMIT $2`,
+            values: [input.pattern, input.limit],
+        };
+    }
+    return {
+        sql: `SELECT schema_info.schema_name AS name,
+                 count(table_info.table_name)::integer AS table_count
+          FROM information_schema.schemata schema_info
+          LEFT JOIN information_schema.tables table_info
+            ON table_info.table_schema = schema_info.schema_name
+           AND table_info.table_type = 'BASE TABLE'
+          WHERE schema_info.schema_name NOT IN (${EXCLUDED_SCHEMAS})
+            AND schema_info.schema_name ILIKE $1
+          GROUP BY schema_info.schema_name
+          ORDER BY schema_info.schema_name ASC
+          LIMIT $2`,
+        values: [input.pattern, input.limit],
+    };
+}
+function relationQuery(input, objectType) {
+    const values = [input.pattern];
+    const conditions = [
+        `relation_info.table_type = '${objectType === "table" ? "BASE TABLE" : "VIEW"}'`,
+        `relation_info.table_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "relation_info.table_name ILIKE $1",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`relation_info.table_schema = $${values.length}`);
+    }
+    values.push(input.limit);
+    return {
+        sql: `SELECT ${relationFields(objectType, input.detail_level)}
+          FROM information_schema.tables relation_info
+          JOIN pg_catalog.pg_namespace relation_namespace
+            ON relation_namespace.nspname = relation_info.table_schema
+          JOIN pg_catalog.pg_class relation_class
+            ON relation_class.relnamespace = relation_namespace.oid
+           AND relation_class.relname = relation_info.table_name
+          WHERE ${conditions.join(" AND ")}
+          ORDER BY relation_info.table_schema ASC, relation_info.table_name ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+function relationFields(objectType, detail) {
+    const names = "relation_info.table_name AS name, relation_info.table_schema AS schema";
+    if (detail === "names")
+        return names;
+    const summary = [
+        names,
+        `(
+       SELECT count(*)::integer
+       FROM information_schema.columns column_info
+       WHERE column_info.table_schema = relation_info.table_schema
+         AND column_info.table_name = relation_info.table_name
+     ) AS column_count`,
+        ...(objectType === "table"
+            ? [
+                `CASE
+             WHEN relation_class.reltuples >= 0 THEN relation_class.reltuples::bigint::double precision
+             ELSE NULL
+           END AS row_count`,
+            ]
+            : []),
+        "obj_description(relation_class.oid, 'pg_class') AS comment",
+    ];
+    if (detail === "summary")
+        return summary.join(",\n                 ");
+    const columns = `COALESCE((
+       SELECT jsonb_agg(
+                jsonb_build_object(
+                  'name', column_info.column_name,
+                  'type', column_info.data_type,
+                  'nullable', column_info.is_nullable = 'YES',
+                  'default', column_info.column_default
+                ) || CASE
+                       WHEN column_description.description IS NULL THEN '{}'::jsonb
+                       ELSE jsonb_build_object('description', column_description.description)
+                     END
+                ORDER BY column_info.ordinal_position
+              )
+       FROM information_schema.columns column_info
+       LEFT JOIN pg_catalog.pg_description column_description
+         ON column_description.objoid = relation_class.oid
+        AND column_description.objsubid = column_info.ordinal_position
+       WHERE column_info.table_schema = relation_info.table_schema
+         AND column_info.table_name = relation_info.table_name
+     ), '[]'::jsonb) AS columns`;
+    const indexes = objectType === "table"
+        ? `COALESCE((
+           SELECT jsonb_agg(
+                    jsonb_build_object(
+                      'name', index_info.name,
+                      'columns', index_info.columns,
+                      'unique', index_info.unique,
+                      'primary', index_info.primary
+                    )
+                    ORDER BY index_info.name
+                  )
+           FROM (
+             SELECT index_class.relname AS name,
+                    array_agg(attribute.attname ORDER BY indexed_attribute.ordinality) AS columns,
+                    index_definition.indisunique AS unique,
+                    index_definition.indisprimary AS primary
+             FROM pg_catalog.pg_index index_definition
+             JOIN pg_catalog.pg_class index_class ON index_class.oid = index_definition.indexrelid
+             CROSS JOIN LATERAL unnest(index_definition.indkey) WITH ORDINALITY
+               AS indexed_attribute(attnum, ordinality)
+             JOIN pg_catalog.pg_attribute attribute
+               ON attribute.attrelid = relation_class.oid
+              AND attribute.attnum = indexed_attribute.attnum
+              AND attribute.attnum > 0
+              AND NOT attribute.attisdropped
+             WHERE index_definition.indrelid = relation_class.oid
+             GROUP BY index_class.relname, index_definition.indisunique, index_definition.indisprimary
+           ) index_info
+         ), '[]'::jsonb) AS indexes`
+        : "'[]'::jsonb AS indexes";
+    return [...summary, columns, indexes].join(",\n                 ");
+}
+function columnQuery(input) {
+    const values = [input.pattern];
+    const conditions = [
+        "column_info.column_name ILIKE $1",
+        `column_info.table_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "relation_info.table_type IN ('BASE TABLE', 'VIEW')",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`column_info.table_schema = $${values.length}`);
+    }
+    if (input.table !== undefined) {
+        values.push(input.table);
+        conditions.push(`column_info.table_name = $${values.length}`);
+    }
+    values.push(input.limit);
+    const fields = input.detail_level === "names"
+        ? 'column_info.column_name AS name, column_info.table_name AS "table", column_info.table_schema AS schema'
+        : `column_info.column_name AS name,
+         column_info.table_name AS "table",
+         column_info.table_schema AS schema,
+         column_info.data_type AS type,
+         column_info.is_nullable = 'YES' AS nullable,
+         column_info.column_default AS "default",
+         column_description.description AS description`;
+    return {
+        sql: `SELECT ${fields}
+          FROM information_schema.columns column_info
+          JOIN information_schema.tables relation_info
+            ON relation_info.table_schema = column_info.table_schema
+           AND relation_info.table_name = column_info.table_name
+          LEFT JOIN pg_catalog.pg_namespace relation_namespace
+            ON relation_namespace.nspname = column_info.table_schema
+          LEFT JOIN pg_catalog.pg_class relation_class
+            ON relation_class.relnamespace = relation_namespace.oid
+           AND relation_class.relname = column_info.table_name
+          LEFT JOIN pg_catalog.pg_description column_description
+            ON column_description.objoid = relation_class.oid
+           AND column_description.objsubid = column_info.ordinal_position
+          WHERE ${conditions.join(" AND ")}
+          ORDER BY column_info.table_schema ASC,
+                   CASE WHEN relation_info.table_type = 'BASE TABLE' THEN 0 ELSE 1 END ASC,
+                   column_info.table_name ASC,
+                   column_info.ordinal_position ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+function routineQuery(input, objectType) {
+    const values = [input.pattern];
+    const routineType = objectType === "procedure" ? "PROCEDURE" : "FUNCTION";
+    const conditions = [
+        `routine_info.routine_type = '${routineType}'`,
+        `routine_info.routine_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "routine_info.routine_name ILIKE $1",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`routine_info.routine_schema = $${values.length}`);
+    }
+    values.push(input.limit);
+    const names = "routine_info.routine_name AS name, routine_info.routine_schema AS schema";
+    const fields = input.detail_level === "names"
+        ? names
+        : `${names},
+         CASE WHEN routine_info.routine_type = 'PROCEDURE' THEN 'procedure' ELSE 'function' END AS type,
+         COALESCE(routine_info.external_language, 'sql') AS language,
+         CASE WHEN routine_info.data_type = 'void' THEN NULL ELSE routine_info.data_type END AS return_type${input.detail_level === "full"
+            ? `,
+         COALESCE((
+           SELECT string_agg(
+                    parameter_info.parameter_name || ' ' || parameter_info.parameter_mode || ' ' || parameter_info.data_type,
+                    ', ' ORDER BY parameter_info.ordinal_position
+                  )
+           FROM information_schema.parameters parameter_info
+           WHERE parameter_info.specific_schema = routine_info.specific_schema
+             AND parameter_info.specific_name = routine_info.specific_name
+             AND parameter_info.parameter_name IS NOT NULL
+         ), '') AS parameters,
+         NULLIF(routine_info.routine_definition, '') AS definition`
+            : ""}`;
+    return {
+        sql: `SELECT ${fields}
+          FROM information_schema.routines routine_info
+          WHERE ${conditions.join(" AND ")}
+          ORDER BY routine_info.routine_schema ASC,
+                   routine_info.routine_name ASC,
+                   routine_info.specific_name ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+function indexQuery(input) {
+    const values = [input.pattern];
+    const conditions = [
+        "index_class.relname ILIKE $1",
+        `relation_info.table_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "relation_info.table_type = 'BASE TABLE'",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`relation_info.table_schema = $${values.length}`);
+    }
+    if (input.table !== undefined) {
+        values.push(input.table);
+        conditions.push(`relation_info.table_name = $${values.length}`);
+    }
+    values.push(input.limit);
+    const names = 'index_class.relname AS name, relation_info.table_name AS "table", relation_info.table_schema AS schema';
+    const fields = input.detail_level === "names"
+        ? names
+        : `${names},
+         array_agg(attribute.attname ORDER BY indexed_attribute.ordinality) AS columns,
+         index_definition.indisunique AS unique,
+         index_definition.indisprimary AS primary`;
+    return {
+        sql: `SELECT ${fields}
+          FROM information_schema.tables relation_info
+          JOIN pg_catalog.pg_namespace relation_namespace
+            ON relation_namespace.nspname = relation_info.table_schema
+          JOIN pg_catalog.pg_class relation_class
+            ON relation_class.relnamespace = relation_namespace.oid
+           AND relation_class.relname = relation_info.table_name
+          JOIN pg_catalog.pg_index index_definition ON index_definition.indrelid = relation_class.oid
+          JOIN pg_catalog.pg_class index_class ON index_class.oid = index_definition.indexrelid
+          CROSS JOIN LATERAL unnest(index_definition.indkey) WITH ORDINALITY
+            AS indexed_attribute(attnum, ordinality)
+          JOIN pg_catalog.pg_attribute attribute
+            ON attribute.attrelid = relation_class.oid
+           AND attribute.attnum = indexed_attribute.attnum
+           AND attribute.attnum > 0
+           AND NOT attribute.attisdropped
+          WHERE ${conditions.join(" AND ")}
+          GROUP BY index_class.relname,
+                   relation_info.table_name,
+                   relation_info.table_schema,
+                   index_definition.indisunique,
+                   index_definition.indisprimary,
+                   index_definition.indkey
+          ORDER BY relation_info.table_schema ASC,
+                   relation_info.table_name ASC,
+                   index_class.relname ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+//# sourceMappingURL=postgres-object-search.js.map

package/dist/domain/postgres-object-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-object-search.js","sourceRoot":"","sources":["../../src/domain/postgres-object-search.ts"],"names":[],"mappings":"AAOA,MAAM,gBAAgB,GAAG,gDAAgD,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAyB;IAEzB,QAAQ,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,WAAW;YACd,OAAO,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,UAAU;YACb,OAAO,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACzC,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAA0B,EAC1B,IAAwC;IAExC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAC9B,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B,EAAE,KAAa;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO;YACL,GAAG,EAAE;;oDAEyC,gBAAgB;;;qBAG/C;YACf,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE;;;;;;kDAMyC,gBAAgB;;;;mBAI/C;QACf,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAyB,EACzB,UAA4B;IAE5B,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG;QACjB,+BAA+B,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG;QAChF,sCAAsC,gBAAgB,GAAG;QACzD,mCAAmC;KACpC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO;QACL,GAAG,EAAE,UAAU,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC;;;;;;;kBAO/C,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;mBAEvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,UAA4B,EAC5B,MAA0C;IAE1C,MAAM,KAAK,GAAG,wEAAwE,CAAC;IACvF,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAErC,MAAM,OAAO,GAAG;QACd,KAAK;QACL;;;;;uBAKmB;QACnB,GAAG,CAAC,UAAU,KAAK,OAAO;YACxB,CAAC,CAAC;gBACE;;;4BAGkB;aACnB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,4DAA4D;KAC7D,CAAC;IACF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;gCAmBc,CAAC;IAC/B,MAAM,OAAO,GACX,UAAU,KAAK,OAAO;QACpB,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA2B4B;QAC9B,CAAC,CAAC,wBAAwB,CAAC;IAC/B,OAAO,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG;QACjB,kCAAkC;QAClC,oCAAoC,gBAAgB,GAAG;QACvD,oDAAoD;KACrD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,KAAK,OAAO;QAC5B,CAAC,CAAC,wGAAwG;QAC1G,CAAC,CAAC;;;;;;uDAM+C,CAAC;IACtD,OAAO;QACL,GAAG,EAAE,UAAU,MAAM;;;;;;;;;;;;;kBAaP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;mBAKvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAyB,EACzB,UAAoC;IAEpC,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,UAAU,GAAG;QACjB,gCAAgC,WAAW,GAAG;QAC9C,uCAAuC,gBAAgB,GAAG;QAC1D,oCAAoC;KACrC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,0EAA0E,CAAC;IACzF,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,KAAK,OAAO;QAC5B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,KAAK;;;6GAIL,KAAK,CAAC,YAAY,KAAK,MAAM;YAC3B,CAAC,CAAC;;;;;;;;;;;mEAWoD;YACtD,CAAC,CAAC,EACN,EAAE,CAAC;IACV,OAAO;QACL,GAAG,EAAE,UAAU,MAAM;;kBAEP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;mBAIvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG;QACjB,8BAA8B;QAC9B,sCAAsC,gBAAgB,GAAG;QACzD,yCAAyC;KAC1C,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,KAAK,GACT,wGAAwG,CAAC;IAC3G,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,KAAK,OAAO;QAC5B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,KAAK;;;kDAGkC,CAAC;IACjD,OAAO;QACL,GAAG,EAAE,UAAU,MAAM;;;;;;;;;;;;;;;;kBAgBP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;;;;;;mBAUvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/domain/redaction.js

@@ -0,0 +1,47 @@
+/**
+ * Pure last-line defense for values that may be reflected in operational logs
+ * or CLI errors. Domain validation still avoids echoing untrusted values; this
+ * catches URI and assignment-shaped credentials from unexpected call paths.
+ */
+const CONNECTION_URI = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?):\/\/)[^\s"'<>]+/gi;
+const SECRET_ASSIGNMENT = /((?:--?(?:token|secret|password|passwd|pwd|api[-_]?key|key|auth(?:orization)?|dsn|database[-_]?url|pgpassword|pgpassfile)|["']?(?:token|secret|password|passwd|pwd|api[-_]?key|key|auth(?:orization)?|dsn|database[-_]?url|pgpassword|pgpassfile)["']?)\s*(?:=|:|\s+)\s*)(?:"[^"]*"|'[^']*'|[^\s,}\]]+)/gi;
+const SENSITIVE_KEY = /(?:^|_)(?:access_key|api_key|auth(?:orization)?|client_secret|connection_string|connection_url|connectionstring|connectionurl|credential(?:s)?|database_url|databaseurl|dsn|key|password|passwd|pgpassfile|pgpassword|private_key|pwd|secret|secrets|token|tokens)(?:_|$)/i;
+export function redactSensitiveText(text) {
+    return text
+        .replace(CONNECTION_URI, "$1***")
+        .replace(SECRET_ASSIGNMENT, "$1***")
+        .replace(/\bBearer\s+\S+/gi, "Bearer ***");
+}
+/** Detect semantic secret fields even when their opaque value has no recognizable syntax. */
+export function isSensitiveKey(key) {
+    const normalized = key
+        .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+        .replace(/[-\s]+/g, "_")
+        .toLowerCase();
+    return SENSITIVE_KEY.test(normalized);
+}
+/** Safe predicate for configuration shapes that must never reflect credentials. */
+export function containsSensitiveData(value) {
+    if (typeof value === "string")
+        return redactSensitiveText(value) !== value;
+    if (Array.isArray(value))
+        return value.some(containsSensitiveData);
+    if (value !== null && typeof value === "object") {
+        return Object.entries(value).some(([key, nested]) => isSensitiveKey(key) || containsSensitiveData(nested));
+    }
+    return false;
+}
+export function redactSensitiveValue(value) {
+    if (typeof value === "string")
+        return redactSensitiveText(value);
+    if (Array.isArray(value))
+        return value.map(redactSensitiveValue);
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [
+            key,
+            isSensitiveKey(key) ? "***" : redactSensitiveValue(nested),
+        ]));
+    }
+    return value;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/domain/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/domain/redaction.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,cAAc,GAAG,kEAAkE,CAAC;AAC1F,MAAM,iBAAiB,GACrB,2SAA2S,CAAC;AAC9S,MAAM,aAAa,GACjB,4QAA4Q,CAAC;AAE/Q,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACR,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC;SAChC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC;SACnC,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,UAAU,GAAG,GAAG;SACnB,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,WAAW,EAAE,CAAC;IACjB,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3C,GAAG;YACH,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;SAC3D,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/domain/workline-mcp-entry.js

@@ -1,13 +1,11 @@
 /**
- * La entrada con la que un host ofrece el servidor propio de Workline.
+ * La entrada histórica con la que un host ofrecía el servidor de elicitation.
  *
- * Se construye acá y no en cada sitio que la necesita porque la instalación, la
- * retirada y la observación tienen que hablar de LA MISMA entrada: si el nombre o
- * el comando difirieran entre ellas, instalar dejaría una que retirar no encuentra
- * y observar informaría sobre otra.
+ * Se conserva para reconocer esa forma con exactitud. La instalación de skills no
+ * vuelve a escribirla: un descriptor MCP global requiere una acción explícita.
  *
  * El comando es el propio binario del CLI, con el envoltorio de Windows que
- * `buildMcpEntry` ya resolvió para el lanzador de dbhub: allá el bin global es un
+ * `buildMcpEntry` ya resolvió para el servidor de base de datos: allá el bin global es un
  * `.cmd`, y un host que lo lanza sin shell falla con ENOENT. Repetir el criterio
  * es reusar una decisión ya probada, no copiar código.
  */
@@ -20,9 +18,8 @@
  */
 export const WORKLINE_MCP_ENTRY_NAME = "agent-workflow";
 /**
- * El host viaja en los argumentos porque el servidor no puede detectarlo desde
- * adentro: lo lanza el host por entrada y salida estándar, sin variable que lo
- * identifique. Así habilita sólo una vía de elicitation observada para ese host.
+ * El host viajaba en los argumentos porque el servidor no podía detectarlo desde
+ * adentro. Esta forma existe sólo como firma de una configuración legacy.
  */
 export function worklineMcpEntry(host, platform = process.platform) {
     const isWin = platform === "win32";

package/dist/domain/workline-mcp-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"workline-mcp-entry.js","sourceRoot":"","sources":["../../src/domain/workline-mcp-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IAChF,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;QACzC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;QACxD,GAAG,EAAE,EAAE;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workline-mcp-entry.js","sourceRoot":"","sources":["../../src/domain/workline-mcp-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IAChF,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;QACzC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;QACxD,GAAG,EAAE,EAAE;KACR,CAAC;AACJ,CAAC"}

package/dist/ports/postgres-tools.js

@@ -0,0 +1,10 @@
+/** A driver-safe failure that can cross the PostgreSQL seam without secrets. */
+export class PostgresToolError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "PostgresToolError";
+    }
+}
+//# sourceMappingURL=postgres-tools.js.map

package/dist/ports/postgres-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-tools.js","sourceRoot":"","sources":["../../src/ports/postgres-tools.ts"],"names":[],"mappings":"AAeA,gFAAgF;AAChF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tacuchi/agent-workflow-cli",
-  "version": "23.0.0",
+  "version": "24.0.0",
   "description": "Runtime CLI for Workline — the stages + loops + artifacts system for agent work. Bundles the universal `w` skill set under `skills/w/` (slash commands `/w:*`: spec-new/spec-refine, plan-new/plan-exec, quick, persist, workspace-init, export-*); `self install --target <host>` copies SKILL + commands + hooks into the host. Pluggable capability skills resolve through `.workflow/skills.toml`. Namespace auto-detected from any `.<ns>/sessions/` dir in CWD; default `workflow`.",
   "type": "module",
   "bin": {
@@ -47,6 +47,8 @@
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
     "@types/node": "^22.10.5",
+    "@types/pg": "^8.23.1",
+    "@types/pg-cursor": "^2.7.2",
     "@types/react": "^18.3.28",
     "ink-testing-library": "^4.0.0",
     "typescript": "^5.7.3",
@@ -59,6 +61,8 @@
     "@inkjs/ui": "^2.0.0",
     "@inquirer/prompts": "^7.10.1",
     "ink": "^5.2.1",
+    "pg": "^8.23.0",
+    "pg-cursor": "^2.22.0",
     "react": "^18.3.1",
     "smol-toml": "^1.6.1"
   }