@tacuchi/agent-workflow-cli 23.0.0 → 25.0.0

package/dist/domain/postgres-object-search.js

@@ -0,0 +1,320 @@
+const EXCLUDED_SCHEMAS = "'pg_catalog', 'information_schema', 'pg_toast'";
+/**
+ * Builds the PostgreSQL equivalents of DBHub 1.2.1's object discovery
+ * queries. All user-provided filters remain placeholders; the only SQL text
+ * selected here comes from the closed tool schema.
+ */
+export function buildPostgresObjectSearchQuery(input) {
+    switch (input.object_type) {
+        case "schema":
+            return schemaQuery(input);
+        case "table":
+            return relationQuery(input, "table");
+        case "view":
+            return relationQuery(input, "view");
+        case "column":
+            return columnQuery(input);
+        case "procedure":
+            return routineQuery(input, "procedure");
+        case "function":
+            return routineQuery(input, "function");
+        case "index":
+            return indexQuery(input);
+    }
+}
+/**
+ * `pg` maps nullable catalog columns to null, while DBHub omits optional
+ * comment/description/routine fields. Keep required nullable fields such as
+ * `row_count` and `default` intact so the public shape stays compatible.
+ */
+export function normalizePostgresObjectSearchRows(_input, rows) {
+    return rows.map((row) => {
+        const normalized = { ...row };
+        dropOptional(normalized, "comment");
+        dropOptional(normalized, "description");
+        dropOptional(normalized, "return_type");
+        dropOptional(normalized, "definition");
+        return normalized;
+    });
+}
+function dropOptional(row, field) {
+    const value = row[field];
+    if (value === null || value === undefined || value === "")
+        delete row[field];
+}
+function schemaQuery(input) {
+    if (input.detail_level === "names") {
+        return {
+            sql: `SELECT schema_info.schema_name AS name
+            FROM information_schema.schemata schema_info
+            WHERE schema_info.schema_name NOT IN (${EXCLUDED_SCHEMAS})
+              AND schema_info.schema_name ILIKE $1
+            ORDER BY schema_info.schema_name ASC
+            LIMIT $2`,
+            values: [input.pattern, input.limit],
+        };
+    }
+    return {
+        sql: `SELECT schema_info.schema_name AS name,
+                 count(table_info.table_name)::integer AS table_count
+          FROM information_schema.schemata schema_info
+          LEFT JOIN information_schema.tables table_info
+            ON table_info.table_schema = schema_info.schema_name
+           AND table_info.table_type = 'BASE TABLE'
+          WHERE schema_info.schema_name NOT IN (${EXCLUDED_SCHEMAS})
+            AND schema_info.schema_name ILIKE $1
+          GROUP BY schema_info.schema_name
+          ORDER BY schema_info.schema_name ASC
+          LIMIT $2`,
+        values: [input.pattern, input.limit],
+    };
+}
+function relationQuery(input, objectType) {
+    const values = [input.pattern];
+    const conditions = [
+        `relation_info.table_type = '${objectType === "table" ? "BASE TABLE" : "VIEW"}'`,
+        `relation_info.table_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "relation_info.table_name ILIKE $1",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`relation_info.table_schema = $${values.length}`);
+    }
+    values.push(input.limit);
+    return {
+        sql: `SELECT ${relationFields(objectType, input.detail_level)}
+          FROM information_schema.tables relation_info
+          JOIN pg_catalog.pg_namespace relation_namespace
+            ON relation_namespace.nspname = relation_info.table_schema
+          JOIN pg_catalog.pg_class relation_class
+            ON relation_class.relnamespace = relation_namespace.oid
+           AND relation_class.relname = relation_info.table_name
+          WHERE ${conditions.join(" AND ")}
+          ORDER BY relation_info.table_schema ASC, relation_info.table_name ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+function relationFields(objectType, detail) {
+    const names = "relation_info.table_name AS name, relation_info.table_schema AS schema";
+    if (detail === "names")
+        return names;
+    const summary = [
+        names,
+        `(
+       SELECT count(*)::integer
+       FROM information_schema.columns column_info
+       WHERE column_info.table_schema = relation_info.table_schema
+         AND column_info.table_name = relation_info.table_name
+     ) AS column_count`,
+        ...(objectType === "table"
+            ? [
+                `CASE
+             WHEN relation_class.reltuples >= 0 THEN relation_class.reltuples::bigint::double precision
+             ELSE NULL
+           END AS row_count`,
+            ]
+            : []),
+        "obj_description(relation_class.oid, 'pg_class') AS comment",
+    ];
+    if (detail === "summary")
+        return summary.join(",\n                 ");
+    const columns = `COALESCE((
+       SELECT jsonb_agg(
+                jsonb_build_object(
+                  'name', column_info.column_name,
+                  'type', column_info.data_type,
+                  'nullable', column_info.is_nullable = 'YES',
+                  'default', column_info.column_default
+                ) || CASE
+                       WHEN column_description.description IS NULL THEN '{}'::jsonb
+                       ELSE jsonb_build_object('description', column_description.description)
+                     END
+                ORDER BY column_info.ordinal_position
+              )
+       FROM information_schema.columns column_info
+       LEFT JOIN pg_catalog.pg_description column_description
+         ON column_description.objoid = relation_class.oid
+        AND column_description.objsubid = column_info.ordinal_position
+       WHERE column_info.table_schema = relation_info.table_schema
+         AND column_info.table_name = relation_info.table_name
+     ), '[]'::jsonb) AS columns`;
+    const indexes = objectType === "table"
+        ? `COALESCE((
+           SELECT jsonb_agg(
+                    jsonb_build_object(
+                      'name', index_info.name,
+                      'columns', index_info.columns,
+                      'unique', index_info.unique,
+                      'primary', index_info.primary
+                    )
+                    ORDER BY index_info.name
+                  )
+           FROM (
+             SELECT index_class.relname AS name,
+                    array_agg(attribute.attname ORDER BY indexed_attribute.ordinality) AS columns,
+                    index_definition.indisunique AS unique,
+                    index_definition.indisprimary AS primary
+             FROM pg_catalog.pg_index index_definition
+             JOIN pg_catalog.pg_class index_class ON index_class.oid = index_definition.indexrelid
+             CROSS JOIN LATERAL unnest(index_definition.indkey) WITH ORDINALITY
+               AS indexed_attribute(attnum, ordinality)
+             JOIN pg_catalog.pg_attribute attribute
+               ON attribute.attrelid = relation_class.oid
+              AND attribute.attnum = indexed_attribute.attnum
+              AND attribute.attnum > 0
+              AND NOT attribute.attisdropped
+             WHERE index_definition.indrelid = relation_class.oid
+             GROUP BY index_class.relname, index_definition.indisunique, index_definition.indisprimary
+           ) index_info
+         ), '[]'::jsonb) AS indexes`
+        : "'[]'::jsonb AS indexes";
+    return [...summary, columns, indexes].join(",\n                 ");
+}
+function columnQuery(input) {
+    const values = [input.pattern];
+    const conditions = [
+        "column_info.column_name ILIKE $1",
+        `column_info.table_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "relation_info.table_type IN ('BASE TABLE', 'VIEW')",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`column_info.table_schema = $${values.length}`);
+    }
+    if (input.table !== undefined) {
+        values.push(input.table);
+        conditions.push(`column_info.table_name = $${values.length}`);
+    }
+    values.push(input.limit);
+    const fields = input.detail_level === "names"
+        ? 'column_info.column_name AS name, column_info.table_name AS "table", column_info.table_schema AS schema'
+        : `column_info.column_name AS name,
+         column_info.table_name AS "table",
+         column_info.table_schema AS schema,
+         column_info.data_type AS type,
+         column_info.is_nullable = 'YES' AS nullable,
+         column_info.column_default AS "default",
+         column_description.description AS description`;
+    return {
+        sql: `SELECT ${fields}
+          FROM information_schema.columns column_info
+          JOIN information_schema.tables relation_info
+            ON relation_info.table_schema = column_info.table_schema
+           AND relation_info.table_name = column_info.table_name
+          LEFT JOIN pg_catalog.pg_namespace relation_namespace
+            ON relation_namespace.nspname = column_info.table_schema
+          LEFT JOIN pg_catalog.pg_class relation_class
+            ON relation_class.relnamespace = relation_namespace.oid
+           AND relation_class.relname = column_info.table_name
+          LEFT JOIN pg_catalog.pg_description column_description
+            ON column_description.objoid = relation_class.oid
+           AND column_description.objsubid = column_info.ordinal_position
+          WHERE ${conditions.join(" AND ")}
+          ORDER BY column_info.table_schema ASC,
+                   CASE WHEN relation_info.table_type = 'BASE TABLE' THEN 0 ELSE 1 END ASC,
+                   column_info.table_name ASC,
+                   column_info.ordinal_position ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+function routineQuery(input, objectType) {
+    const values = [input.pattern];
+    const routineType = objectType === "procedure" ? "PROCEDURE" : "FUNCTION";
+    const conditions = [
+        `routine_info.routine_type = '${routineType}'`,
+        `routine_info.routine_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "routine_info.routine_name ILIKE $1",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`routine_info.routine_schema = $${values.length}`);
+    }
+    values.push(input.limit);
+    const names = "routine_info.routine_name AS name, routine_info.routine_schema AS schema";
+    const fields = input.detail_level === "names"
+        ? names
+        : `${names},
+         CASE WHEN routine_info.routine_type = 'PROCEDURE' THEN 'procedure' ELSE 'function' END AS type,
+         COALESCE(routine_info.external_language, 'sql') AS language,
+         CASE WHEN routine_info.data_type = 'void' THEN NULL ELSE routine_info.data_type END AS return_type${input.detail_level === "full"
+            ? `,
+         COALESCE((
+           SELECT string_agg(
+                    parameter_info.parameter_name || ' ' || parameter_info.parameter_mode || ' ' || parameter_info.data_type,
+                    ', ' ORDER BY parameter_info.ordinal_position
+                  )
+           FROM information_schema.parameters parameter_info
+           WHERE parameter_info.specific_schema = routine_info.specific_schema
+             AND parameter_info.specific_name = routine_info.specific_name
+             AND parameter_info.parameter_name IS NOT NULL
+         ), '') AS parameters,
+         NULLIF(routine_info.routine_definition, '') AS definition`
+            : ""}`;
+    return {
+        sql: `SELECT ${fields}
+          FROM information_schema.routines routine_info
+          WHERE ${conditions.join(" AND ")}
+          ORDER BY routine_info.routine_schema ASC,
+                   routine_info.routine_name ASC,
+                   routine_info.specific_name ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+function indexQuery(input) {
+    const values = [input.pattern];
+    const conditions = [
+        "index_class.relname ILIKE $1",
+        `relation_info.table_schema NOT IN (${EXCLUDED_SCHEMAS})`,
+        "relation_info.table_type = 'BASE TABLE'",
+    ];
+    if (input.schema !== undefined) {
+        values.push(input.schema);
+        conditions.push(`relation_info.table_schema = $${values.length}`);
+    }
+    if (input.table !== undefined) {
+        values.push(input.table);
+        conditions.push(`relation_info.table_name = $${values.length}`);
+    }
+    values.push(input.limit);
+    const names = 'index_class.relname AS name, relation_info.table_name AS "table", relation_info.table_schema AS schema';
+    const fields = input.detail_level === "names"
+        ? names
+        : `${names},
+         array_agg(attribute.attname ORDER BY indexed_attribute.ordinality) AS columns,
+         index_definition.indisunique AS unique,
+         index_definition.indisprimary AS primary`;
+    return {
+        sql: `SELECT ${fields}
+          FROM information_schema.tables relation_info
+          JOIN pg_catalog.pg_namespace relation_namespace
+            ON relation_namespace.nspname = relation_info.table_schema
+          JOIN pg_catalog.pg_class relation_class
+            ON relation_class.relnamespace = relation_namespace.oid
+           AND relation_class.relname = relation_info.table_name
+          JOIN pg_catalog.pg_index index_definition ON index_definition.indrelid = relation_class.oid
+          JOIN pg_catalog.pg_class index_class ON index_class.oid = index_definition.indexrelid
+          CROSS JOIN LATERAL unnest(index_definition.indkey) WITH ORDINALITY
+            AS indexed_attribute(attnum, ordinality)
+          JOIN pg_catalog.pg_attribute attribute
+            ON attribute.attrelid = relation_class.oid
+           AND attribute.attnum = indexed_attribute.attnum
+           AND attribute.attnum > 0
+           AND NOT attribute.attisdropped
+          WHERE ${conditions.join(" AND ")}
+          GROUP BY index_class.relname,
+                   relation_info.table_name,
+                   relation_info.table_schema,
+                   index_definition.indisunique,
+                   index_definition.indisprimary,
+                   index_definition.indkey
+          ORDER BY relation_info.table_schema ASC,
+                   relation_info.table_name ASC,
+                   index_class.relname ASC
+          LIMIT $${values.length}`,
+        values,
+    };
+}
+//# sourceMappingURL=postgres-object-search.js.map

package/dist/domain/postgres-object-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-object-search.js","sourceRoot":"","sources":["../../src/domain/postgres-object-search.ts"],"names":[],"mappings":"AAOA,MAAM,gBAAgB,GAAG,gDAAgD,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAAyB;IAEzB,QAAQ,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,WAAW;YACd,OAAO,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,UAAU;YACb,OAAO,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACzC,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAA0B,EAC1B,IAAwC;IAExC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACtB,MAAM,UAAU,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAC9B,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACpC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxC,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAA4B,EAAE,KAAa;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO;YACL,GAAG,EAAE;;oDAEyC,gBAAgB;;;qBAG/C;YACf,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;SACrC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,EAAE;;;;;;kDAMyC,gBAAgB;;;;mBAI/C;QACf,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,KAAyB,EACzB,UAA4B;IAE5B,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG;QACjB,+BAA+B,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG;QAChF,sCAAsC,gBAAgB,GAAG;QACzD,mCAAmC;KACpC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO;QACL,GAAG,EAAE,UAAU,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC;;;;;;;kBAO/C,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;mBAEvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,UAA4B,EAC5B,MAA0C;IAE1C,MAAM,KAAK,GAAG,wEAAwE,CAAC;IACvF,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAErC,MAAM,OAAO,GAAG;QACd,KAAK;QACL;;;;;uBAKmB;QACnB,GAAG,CAAC,UAAU,KAAK,OAAO;YACxB,CAAC,CAAC;gBACE;;;4BAGkB;aACnB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,4DAA4D;KAC7D,CAAC;IACF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;gCAmBc,CAAC;IAC/B,MAAM,OAAO,GACX,UAAU,KAAK,OAAO;QACpB,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA2B4B;QAC9B,CAAC,CAAC,wBAAwB,CAAC;IAC/B,OAAO,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG;QACjB,kCAAkC;QAClC,oCAAoC,gBAAgB,GAAG;QACvD,oDAAoD;KACrD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,KAAK,OAAO;QAC5B,CAAC,CAAC,wGAAwG;QAC1G,CAAC,CAAC;;;;;;uDAM+C,CAAC;IACtD,OAAO;QACL,GAAG,EAAE,UAAU,MAAM;;;;;;;;;;;;;kBAaP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;mBAKvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAyB,EACzB,UAAoC;IAEpC,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,UAAU,GAAG;QACjB,gCAAgC,WAAW,GAAG;QAC9C,uCAAuC,gBAAgB,GAAG;QAC1D,oCAAoC;KACrC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,0EAA0E,CAAC;IACzF,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,KAAK,OAAO;QAC5B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,KAAK;;;6GAIL,KAAK,CAAC,YAAY,KAAK,MAAM;YAC3B,CAAC,CAAC;;;;;;;;;;;mEAWoD;YACtD,CAAC,CAAC,EACN,EAAE,CAAC;IACV,OAAO;QACL,GAAG,EAAE,UAAU,MAAM;;kBAEP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;mBAIvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG;QACjB,8BAA8B;QAC9B,sCAAsC,gBAAgB,GAAG;QACzD,yCAAyC;KAC1C,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,UAAU,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,KAAK,GACT,wGAAwG,CAAC;IAC3G,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,KAAK,OAAO;QAC5B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,KAAK;;;kDAGkC,CAAC;IACjD,OAAO;QACL,GAAG,EAAE,UAAU,MAAM;;;;;;;;;;;;;;;;kBAgBP,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;;;;;;;;mBAUvB,MAAM,CAAC,MAAM,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/domain/redaction.js

@@ -0,0 +1,47 @@
+/**
+ * Pure last-line defense for values that may be reflected in operational logs
+ * or CLI errors. Domain validation still avoids echoing untrusted values; this
+ * catches URI and assignment-shaped credentials from unexpected call paths.
+ */
+const CONNECTION_URI = /\b((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?):\/\/)[^\s"'<>]+/gi;
+const SECRET_ASSIGNMENT = /((?:--?(?:token|secret|password|passwd|pwd|api[-_]?key|key|auth(?:orization)?|dsn|database[-_]?url|pgpassword|pgpassfile)|["']?(?:token|secret|password|passwd|pwd|api[-_]?key|key|auth(?:orization)?|dsn|database[-_]?url|pgpassword|pgpassfile)["']?)\s*(?:=|:|\s+)\s*)(?:"[^"]*"|'[^']*'|[^\s,}\]]+)/gi;
+const SENSITIVE_KEY = /(?:^|_)(?:access_key|api_key|auth(?:orization)?|client_secret|connection_string|connection_url|connectionstring|connectionurl|credential(?:s)?|database_url|databaseurl|dsn|key|password|passwd|pgpassfile|pgpassword|private_key|pwd|secret|secrets|token|tokens)(?:_|$)/i;
+export function redactSensitiveText(text) {
+    return text
+        .replace(CONNECTION_URI, "$1***")
+        .replace(SECRET_ASSIGNMENT, "$1***")
+        .replace(/\bBearer\s+\S+/gi, "Bearer ***");
+}
+/** Detect semantic secret fields even when their opaque value has no recognizable syntax. */
+export function isSensitiveKey(key) {
+    const normalized = key
+        .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+        .replace(/[-\s]+/g, "_")
+        .toLowerCase();
+    return SENSITIVE_KEY.test(normalized);
+}
+/** Safe predicate for configuration shapes that must never reflect credentials. */
+export function containsSensitiveData(value) {
+    if (typeof value === "string")
+        return redactSensitiveText(value) !== value;
+    if (Array.isArray(value))
+        return value.some(containsSensitiveData);
+    if (value !== null && typeof value === "object") {
+        return Object.entries(value).some(([key, nested]) => isSensitiveKey(key) || containsSensitiveData(nested));
+    }
+    return false;
+}
+export function redactSensitiveValue(value) {
+    if (typeof value === "string")
+        return redactSensitiveText(value);
+    if (Array.isArray(value))
+        return value.map(redactSensitiveValue);
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, nested]) => [
+            key,
+            isSensitiveKey(key) ? "***" : redactSensitiveValue(nested),
+        ]));
+    }
+    return value;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/domain/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/domain/redaction.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,cAAc,GAAG,kEAAkE,CAAC;AAC1F,MAAM,iBAAiB,GACrB,2SAA2S,CAAC;AAC9S,MAAM,aAAa,GACjB,4QAA4Q,CAAC;AAE/Q,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACR,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC;SAChC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC;SACnC,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,UAAU,GAAG,GAAG;SACnB,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,WAAW,EAAE,CAAC;IACjB,OAAO,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;YAC3C,GAAG;YACH,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;SAC3D,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/domain/workline-mcp-entry.js

@@ -1,13 +1,11 @@
 /**
- * La entrada con la que un host ofrece el servidor propio de Workline.
+ * La entrada histórica con la que un host ofrecía el servidor de elicitation.
  *
- * Se construye acá y no en cada sitio que la necesita porque la instalación, la
- * retirada y la observación tienen que hablar de LA MISMA entrada: si el nombre o
- * el comando difirieran entre ellas, instalar dejaría una que retirar no encuentra
- * y observar informaría sobre otra.
+ * Se conserva para reconocer esa forma con exactitud. La instalación de skills no
+ * vuelve a escribirla: un descriptor MCP global requiere una acción explícita.
  *
  * El comando es el propio binario del CLI, con el envoltorio de Windows que
- * `buildMcpEntry` ya resolvió para el lanzador de dbhub: allá el bin global es un
+ * `buildMcpEntry` ya resolvió para el servidor de base de datos: allá el bin global es un
  * `.cmd`, y un host que lo lanza sin shell falla con ENOENT. Repetir el criterio
  * es reusar una decisión ya probada, no copiar código.
  */
@@ -20,9 +18,8 @@
  */
 export const WORKLINE_MCP_ENTRY_NAME = "agent-workflow";
 /**
- * El host viaja en los argumentos porque el servidor no puede detectarlo desde
- * adentro: lo lanza el host por entrada y salida estándar, sin variable que lo
- * identifique. Así habilita sólo una vía de elicitation observada para ese host.
+ * El host viajaba en los argumentos porque el servidor no podía detectarlo desde
+ * adentro. Esta forma existe sólo como firma de una configuración legacy.
  */
 export function worklineMcpEntry(host, platform = process.platform) {
     const isWin = platform === "win32";

package/dist/domain/workline-mcp-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"workline-mcp-entry.js","sourceRoot":"","sources":["../../src/domain/workline-mcp-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IAChF,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;QACzC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;QACxD,GAAG,EAAE,EAAE;KACR,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workline-mcp-entry.js","sourceRoot":"","sources":["../../src/domain/workline-mcp-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB,OAAO,CAAC,QAAQ;IAChF,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB;QACzC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;QACxD,GAAG,EAAE,EAAE;KACR,CAAC;AACJ,CAAC"}

package/dist/ports/postgres-tools.js

@@ -0,0 +1,10 @@
+/** A driver-safe failure that can cross the PostgreSQL seam without secrets. */
+export class PostgresToolError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "PostgresToolError";
+    }
+}
+//# sourceMappingURL=postgres-tools.js.map

package/dist/ports/postgres-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-tools.js","sourceRoot":"","sources":["../../src/ports/postgres-tools.ts"],"names":[],"mappings":"AAeA,gFAAgF;AAChF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B;IADX,YACW,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tacuchi/agent-workflow-cli",
-  "version": "23.0.0",
+  "version": "25.0.0",
   "description": "Runtime CLI for Workline — the stages + loops + artifacts system for agent work. Bundles the universal `w` skill set under `skills/w/` (slash commands `/w:*`: spec-new/spec-refine, plan-new/plan-exec, quick, persist, workspace-init, export-*); `self install --target <host>` copies SKILL + commands + hooks into the host. Pluggable capability skills resolve through `.workflow/skills.toml`. Namespace auto-detected from any `.<ns>/sessions/` dir in CWD; default `workflow`.",
   "type": "module",
   "bin": {
@@ -47,6 +47,8 @@
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
     "@types/node": "^22.10.5",
+    "@types/pg": "^8.23.1",
+    "@types/pg-cursor": "^2.7.2",
     "@types/react": "^18.3.28",
     "ink-testing-library": "^4.0.0",
     "typescript": "^5.7.3",
@@ -59,6 +61,8 @@
     "@inkjs/ui": "^2.0.0",
     "@inquirer/prompts": "^7.10.1",
     "ink": "^5.2.1",
+    "pg": "^8.23.0",
+    "pg-cursor": "^2.22.0",
     "react": "^18.3.1",
     "smol-toml": "^1.6.1"
   }

package/skills/w/commands/plan-exec.md

@@ -37,7 +37,7 @@ checkboxes and `> Estado:` line in the living plan.
 ## Two gates that send work back
 
 - **Entry gate** — a plan that would force execution to invent its own structure is not run in silence. A minor gap is normalized **with your consent**; a structural one hands off to `/w:plan-refine`.
-- **Deviation gate** — local detail is resolved inline. A **structural** deviation (a contract, the participating components, the phase order, the simulation boundary) stops execution and returns to `/w:plan-refine`; a **functional** change (result, scope, business rule, acceptance criterion) returns to `/w:spec-refine`.
+- **Deviation gate** — the loop owns it, with **four** exits. Local detail is resolved inline. A divergence that leaves the promise intact registers a decision note on `S{NNN}/AC-nn` and execution continues. A **structural** one (a contract, the components, the phase order, the simulation boundary) returns to `/w:plan-refine`; a moved **promise of the product** (result, scope, business rule, the outcome a criterion states) returns to `/w:spec-refine`. What does not compose against this lineage at all escalates to a spec of its own.
 
 ## More context
 

package/skills/w/commands/spec-new.md

@@ -56,8 +56,8 @@ Systems / components / sources involved. Known constraints.
 - Out: what is NOT included
 
 ## Acceptance criteria
-- [ ] verifiable criterion 1 (EARS style recommended; behavioral ones expand in ## Scenarios)
-- [ ] verifiable criterion 2
+- [ ] AC-01: functional outcome (EARS style recommended; behavioral ones expand in ## Scenarios)
+- [ ] AC-02: …
 
 ## Scenarios         (opt.)
 Behavior made concrete — GIVEN/WHEN/THEN/AND blocks; each traces to ≥1 acceptance criterion.
@@ -86,10 +86,11 @@ Pending doubts. ← the spec-refine-loop closes them.
 - `Scope` always carries `Out`.
 - **Where the reconnaissance lands** — `Context`: the facts that place the request (sources apparently involved, a module's observed responsibility, the relevant technology), **at most one path per component** as an anchor, never a technical inventory. `Assumptions`: the inferences that let the draft advance. `Open questions`: what would need walking the implementation, a human decision, or an unavailable source.
 - **The code found never widens `Scope`** and never becomes a requirement: **acceptance criteria derive from the user's intent**. The reconnaissance may lend vocabulary, name existing actors and boundaries, and avoid obvious contradictions. It must not invent behavior nobody asked for, turn a current technical decision into a user requirement, or impose an implementation as a criterion.
-- **Acceptance criteria = static testable criteria** (the "what"): `plan-exec` validates them, but progress is tracked in the PLAN (its Tasks), never by ticking these `- [ ]`; the spec never mutates by execution, only by a re-refine.
-- **Scenarios = behavior made concrete** (uppercase GIVEN/WHEN/THEN/AND): draft them only when the prompt already describes behavior — deriving the rest is spec-refine work. A scenario earns its place only when it adds GIVEN setup or edge semantics the criterion does not capture — **never restate a criterion 1:1**.
+- **Acceptance criteria = functional, observable outcomes at product level** (the "what"), each labeled `AC-nn`. **That label is what makes it addressable**: a decision note amends it as `S{NNN}/AC-nn`, and the CLI derives the `S{NNN}` from this spec's own file number — spelling the full id on the criterion line is accepted too, never counted twice. What is unaddressable is a criterion with **no label**, and a note naming one the spec does not state is refused with `CONTRACT_ASSERTION_ABSENT`. **The verification strategy — tests, evidence, commands — is the PLAN's** (its `## Validations`): here goes the outcome, there goes how it is proven. Progress is tracked in the PLAN (its Tasks), never by ticking these `- [ ]`; the spec never mutates by execution, only by a re-refine.
+- **A criterion never fixes** a commit SHA or a third-party version as a fact of the contract, a file inventory, or an internal mechanism (a lock, a CAS, the name of a class/function/internal module). **The visible surface IS functional behavior**: for a CLI or an API, its commands, flags, observable messages and output formats are legitimate criteria — what stays out are the internal modules and mechanisms that implement them.
+- **Scenarios = behavior made concrete** (uppercase GIVEN/WHEN/THEN/AND): draft them only when the prompt already describes behavior — deriving the rest is spec-refine work. A scenario earns its place only when it adds GIVEN setup or edge semantics the criterion does not capture — **never restate a criterion 1:1**. They illustrate behavior and **feed** the test derivation `plan-new` does; they are not themselves the executable suite.
 - If **UI** is involved, **record the need and stop there**: mention it in `Requirement`/`Context`. This command creates **no design package** and writes no `## Design references` — the design is composed in `spec-refine` (via the [`design`](../roles/design/ROLE.md) capability, which publishes the package the spec then references). Minting a package from a draft would pin an identity before the requirement is even closed. "UI unspecified" is a first-class refinement gap.
-- The **gaps** the loop detects = weak sections of the schema (vague Requirement, Scope without `Out`, untestable criteria, open questions, undeclared assumptions, contradictions) **+ UI unspecified** when the requirement involves UI.
+- The **gaps** the loop detects = weak sections of the schema (vague Requirement, Scope without `Out`, criteria whose outcome is not observable, open questions, undeclared assumptions, contradictions) **+ UI unspecified** when the requirement involves UI.
 - Equivalent alternative: the user writes the draft by hand. Both paths produce the same file.
 
 > **Reuse by escalation:** the live escalation from `/w:quick` (see [`../loops/quick-loop/LOOP.md`](../loops/quick-loop/LOOP.md) § *QUICK delta*) materializes its draft with **this same procedure** (same schema, same single-pass hard rule — **NO RESEARCH**, no reconnaissance: objective and context arrive adopted), with `## Origin` = "escalated from `/w:quick`" + the original prompt. The consent in the structured-choice equals invoking this command.

package/skills/w/context/MANIFEST.json

@@ -51,7 +51,7 @@
     "plan.entry-gap-minor": "the plan is all but executable: the gap is derivable from what it already states, so it can be normalized in place",
     "plan.entry-gap-structural": "phases, contracts or journey are missing, or temporary behavior leaves its boundary undeclared",
     "plan.deviation-structural": "the change that appeared while implementing touches a contract, the participating components, the phase order or the simulation boundary",
-    "plan.deviation-functional": "the change that appeared while implementing touches the expected result, the scope, a business rule or an acceptance criterion",
+    "plan.deviation-functional": "the change that appeared while implementing moves the promise of the product: the expected result, the functional scope, a business rule, the actor, or the outcome an acceptance criterion states",
     "plan.deviation-composable": "the change keeps the functional lineage and can be reconciled forward as a durable decision note instead of returning to a refine",
     "plan.deviation-escalation": "what was found does not compose against this lineage and belongs to a spec of its own",
     "plan.closure-lineage": "the divergence stays inside the same functional lineage: it amends how the promise is met, not who promised it",

package/skills/w/harness/HARNESS.md

@@ -106,7 +106,7 @@ Concrete mechanism per harness (matrix base verified **Jul-2026**; the `structur
 
 > **Oz (Warp's cloud sibling).** `oz agent run` is a cloud agent orchestrator that **reuses Warp's surfaces**: same skills (`.agents/skills`, top-level dirs like Warp) and `AGENTS.md`. No dedicated structured-choice schema is documented for Oz itself, so a direct Oz run uses labeled markdown; if Oz delegates to another harness and exposes that harness's native question surface, follow that harness's own binding. Oz differs from Warp in three points: **detection** via `OZ_RUN_ID` (takes priority over Warp when both markers coexist); **MCP without a config file** — the JSON is passed via the `--mcp` flag of `oz agent run` (or the `OZ_MCP_CONFIG` env), it never writes `.warp/.mcp.json`; and **no plugin or hooks** (advisory enforcement, like Warp). Hence it shares the **Warp / Oz** column with those caveats.
 
-> **compaction (signal & self-regulation).** The chassis' *Self-regulation (proactive compaction)* doctrine (`../modules/COMPACTION.md`, loaded under the `compaction` signal) needs two per-host facts: the **context-pressure signal** (does the host surface one the agent can read?) and **`auto`-mode viability** (can compaction fire **without user interaction**?). Claude Code: the signal is the harness' own context warnings; `/compact` is user-invoked — the agent cannot run it itself, so `auto` **degrades to `confirm`** there (the native auto-compact is already cushioned by the PreCompact/PostCompact hooks: checkpoint-write + resume-summary). Hosts with compaction hooks/events (Codex Pre/PostCompact, OpenCode `session.compacted`) cushion resume the same way; hosts with neither signal nor mechanism run the universal fallback (CHECKPOINT + restart + resume) and `auto` likewise degrades. Mode semantics (`[compaction]` config, default, consent): the chassis' subsection — single source.
+> **compaction (signal & self-regulation).** The chassis' *Self-regulation (proactive compaction)* doctrine (`../modules/COMPACTION.md`, loaded under the `compaction` signal) needs one per-host fact: the **context-pressure signal** (does the host surface one the agent can read?). Claude Code: the signal is the harness' own context warnings; `/compact` is user-invoked — the agent cannot run it itself (the native auto-compact is already cushioned by the PreCompact/PostCompact hooks: checkpoint-write + resume-summary). Hosts with compaction hooks/events (Codex Pre/PostCompact, OpenCode `session.compacted`) cushion resume the same way; hosts with neither signal nor mechanism run the universal fallback (CHECKPOINT + restart + resume). Self-regulation semantics: the chassis' subsection — single source.
 
 > **host-memory (tiers & consumers).** Two tiers: *cheap* (structured, bounded — on Claude Code the auto-memory `MEMORY.md` + `CLAUDE.md`) and *deep* (transcript / `--resume` search, expensive). Consumers: **`/status`** reads only the *cheap* tier, **opportunistically and additively** (a `CONTEXTO DEL HOST` section when available; it **never asks** — a read-only dashboard — and silently omits the section on degrade); **`/resume`** **composes `/status`** and escalates a host-only finding **to a proposal only when the workline level does not explain the pending work** (the spec's fixed order governs the proposals, not the summary), optionally using the *deep* tier or asking as fallback. It is *enhancement*, never a `must`.
 

package/skills/w/hooks/README.md

@@ -11,7 +11,7 @@
 | `PreToolUse` (`execute_sql`) | `hook sql-mutation-guard` | Blocks DML/DDL over MCP — reads only (DB scripts-only invariant). |
 | `PreToolUse` (Bash) | `hook git-commit-advisor` | **Advisory (does not block)**: warns if a `git commit` message lacks the active session's `sessionNNN` tag (traceability). Does **not** inspect `push`/`--amend`/`--no-verify`. |
 | `SessionEnd` | `auto-compact-on-close` | Writes `CHECKPOINT.md` on close — the resume key (*CHECKPOINT always* — chassis § Convergence / exit). |
-| `PreCompact` | `checkpoint-write --can-pause` | Writes `CHECKPOINT.md` before the host compacts. |
+| `PreCompact` | `checkpoint-write` | Writes `CHECKPOINT.md` before the host compacts. **Never blocks the compaction.** |
 | `PostCompact` | `resume-summary` | Recovers **the conversation's own** loop state after a compact. |
 
 > **Conversation identity (spec 011).** The three lifecycle hooks act on **one**
@@ -24,14 +24,18 @@
 > `.workflow/sessions/.bindings.json` keyed by the SHA-256 of that id — the raw
 > value is never persisted.
 >
-> **Ambiguity is a capability question, not a guess.** `--can-pause` declares
-> that *this host* can hold its compaction: Claude Code can, so the template
-> passes it and `checkpoint-write` exits **2** with the candidate list instead of
-> writing to an arbitrary session. A host that cannot pause omits the flag —
-> its native compaction completes, and Workline reports
-> `continuity: "degraded"` with `primary_session: null`, having written nothing.
-> The flag is never inferred: guessing it produces false blocks. Per-host
-> installation and transport belong to spec 010.
+> **An unresolved session never holds a compaction back.** `PreCompact` always
+> exits **0**. It used to exit 2 on an ambiguity so a person could name the
+> session first, and that trapped the conversation: the remedy it printed does
+> not always bind the conversation, so the next `/compact` blocked again. Now the
+> host's compaction completes, Workline reports `continuity: "degraded"` with
+> `primary_session: null`, and — whenever there is a candidate that could adopt
+> it — parks a **refuge checkpoint** in `.workflow/sessions/.refuge/` naming the
+> reason, the candidates and the way out. `PostCompact` reports it as `refuge`,
+> and the first `checkpoint-write` that does resolve the session (typically
+> `--code <NNN>`) folds it into that session's `CHECKPOINT.md` and removes it.
+> The refuge names its conversation by the SHA-256 of the id, like the
+> association registry. Per-host installation and transport belong to spec 010.
 
 > **What they enforce (host-level, blocking):** invariant **#4** (DB scripts-only) via `sql-mutation-guard` (blocks DML/DDL over MCP), and the *expected-branch* clause of **#5** via `branch-check` (blocks edits on the wrong branch). The rest of git-safe (`push`/`--amend`/`--no-verify`/`--force`) is **doctrinal** — `git-commit-advisor` only **warns**, it does not block; a host may add its own deny hook if it wants hard enforcement.
 >

package/skills/w/hooks/hooks.template.json

@@ -62,7 +62,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "agent-workflow checkpoint-write --can-pause",
+            "command": "agent-workflow checkpoint-write",
             "statusMessage": "Escribiendo CHECKPOINT.md antes de compactar...",
             "timeout": 10
           }
@@ -81,7 +81,7 @@
           },
           {
             "type": "prompt",
-            "prompt": "Contexto compactado. El JSON anterior es output de `agent-workflow resume-summary`. Si `continuity` es `ok`, reanudá el loop de `primary_session` desde su CHECKPOINT.md y presentá un resumen. Si `continuity` es `degraded`, NO reanudes ninguna sesión: `active_sessions` es un listado, no una identidad — mostrá `candidates` con su `action` y pedí al usuario que elija (después reintentá con `--code <NNN>`). Si no hay sesiones, terminá."
+            "prompt": "Contexto compactado. El JSON anterior es output de `agent-workflow resume-summary`. Si `continuity` es `ok`, reanudá el loop de `primary_session` desde su CHECKPOINT.md y presentá un resumen. Si `continuity` es `degraded`, NO reanudes ninguna sesión: `active_sessions` es un listado, no una identidad — mostrá `candidates` con su `action` y pedí al usuario que elija (después reintentá con `--code <NNN>`). Si el JSON trae `refuge`, la compactación dejó un CHECKPOINT de refugio fuera de toda sesión: mostrá su `path` y avisá que se adopta al resolver la sesión (`aw checkpoint-write --code <NNN>`). Si no hay sesiones, terminá."
           }
         ]
       }

package/skills/w/loops/CHASSIS.md

@@ -115,7 +115,7 @@ Resume **keys off the `CHECKPOINT`** of the run's session, not the existence of
 
 > Each heir defines its **prior-work mark**: spec-refine the spec's frontmatter `status`; plan-refine `## Refinement decisions`; plan-exec the plan-doc's `- [x]` checkboxes; quick has no doc (CHECKPOINT only).
 
-> **`Compactar`** (the `flow` control, across all 3 cases) → write `CHECKPOINT.md` in the session → trigger the harness compaction → resume by reading the checkpoint. **CHECKPOINT before compacting** is invariant. The proactive raise, its two modes and their host binding live in the `compaction` module.
+> **`Compactar`** (the `flow` control, across all 3 cases) → write `CHECKPOINT.md` in the session → trigger the harness compaction → resume by reading the checkpoint. **CHECKPOINT before compacting** is invariant. The proactive raise and its host binding live in the `compaction` module.
 
 ## Convergence / exit