@tacuchi/agent-workflow-cli 4.0.0

package/dist/application/hook-branch-check.d.ts

@@ -0,0 +1,22 @@
+import type { EnvPort } from "../ports/env.js";
+import type { FileSystemPort } from "../ports/file-system.js";
+import type { GitPort } from "../ports/git.js";
+import type { PathsService } from "./paths-service.js";
+export interface BranchCheckResult {
+    exitCode: 0 | 2;
+    stderr?: string;
+}
+export interface BranchCheckInput {
+    stdin: string;
+    fs: FileSystemPort;
+    env: EnvPort;
+    git: GitPort;
+    paths: PathsService;
+    /**
+     * Display name used as message prefix (e.g., "qtc-core", "agent-workflow").
+     * Defaults to "agent-workflow" when omitted.
+     */
+    displayName?: string;
+}
+export declare function runBranchCheckHook(input: BranchCheckInput): Promise<BranchCheckResult>;
+//# sourceMappingURL=hook-branch-check.d.ts.map

package/dist/application/hook-branch-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-branch-check.d.ts","sourceRoot":"","sources":["../../src/application/hook-branch-check.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAM/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,cAAc,CAAC;IACnB,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,YAAY,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAI5F"}

package/dist/application/hook-branch-check.js

@@ -0,0 +1,152 @@
+import { join } from "node:path";
+import { parseProjectBlock, } from "./parsers/project-block.js";
+const TOOLS_OF_INTEREST = new Set(["Edit", "Write", "MultiEdit", "NotebookEdit"]);
+const REFERENCE_DOC = "skills/session/references/branch-verification.md";
+export async function runBranchCheckHook(input) {
+    const target = await resolveBranchCheckTarget(input);
+    if (!target)
+        return { exitCode: 0 };
+    return verifyBranch(input, target);
+}
+async function resolveBranchCheckTarget(input) {
+    const payload = parsePayload(input.stdin);
+    if (!payload)
+        return null;
+    const toolName = typeof payload.tool_name === "string" ? payload.tool_name : "";
+    if (!TOOLS_OF_INTEREST.has(toolName))
+        return null;
+    const filePath = extractFilePath(payload.tool_input);
+    if (!filePath)
+        return null;
+    const block = await readBlock(input.fs, input.env.cwd(), input.paths);
+    if (!block)
+        return null;
+    const source = findOwningSource(block.fuentes, filePath);
+    if (!source)
+        return null;
+    const sessionEntry = block.sessions[0] ?? null;
+    const sessionBranches = sessionEntry?.branches ?? [];
+    const flow = resolveFlow(sessionEntry);
+    const expected = expectedWorkBranch(source, block.working_branches, sessionBranches, flow);
+    if (expected === null)
+        return null;
+    return { source, expected };
+}
+function parsePayload(stdin) {
+    const raw = stdin.trim();
+    if (raw.length === 0)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+async function verifyBranch(input, target) {
+    const { source, expected } = target;
+    if (!(await input.fs.exists(source.path)))
+        return { exitCode: 0 };
+    if (!(await input.git.isGitRepo(source.path)))
+        return { exitCode: 0 };
+    const current = (await input.git.currentBranch(source.path)) ?? null;
+    if (current === null || current === expected)
+        return { exitCode: 0 };
+    const changedFiles = await safeChangedFiles(input.git, source.path);
+    return {
+        exitCode: 2,
+        stderr: formatBlockMessage({
+            alias: source.alias,
+            path: source.path,
+            current,
+            expected,
+            dirty: changedFiles.length > 0,
+            changedFiles,
+            displayName: input.displayName ?? "agent-workflow",
+        }),
+    };
+}
+async function safeChangedFiles(git, repoPath) {
+    try {
+        return await git.changedFiles(repoPath);
+    }
+    catch {
+        return [];
+    }
+}
+function extractFilePath(toolInput) {
+    if (typeof toolInput !== "object" || toolInput === null)
+        return null;
+    const obj = toolInput;
+    for (const key of ["file_path", "path", "notebook_path"]) {
+        const v = obj[key];
+        if (typeof v === "string" && v.length > 0)
+            return v;
+    }
+    return null;
+}
+async function readBlock(fs, cwd, paths) {
+    for (const file of [join(cwd, "CLAUDE.md"), join(cwd, "AGENTS.md")]) {
+        if (!(await fs.exists(file)))
+            continue;
+        const block = parseProjectBlock(await fs.readText(file), paths.blockMarkers());
+        if (block)
+            return block;
+    }
+    return null;
+}
+function findOwningSource(sources, filePath) {
+    for (const s of sources) {
+        if (filePath.startsWith(s.path))
+            return s;
+    }
+    return null;
+}
+function resolveFlow(session) {
+    if (!session)
+        return null;
+    const m = session.folder.match(/^session(\d{3})-([a-z]+)-/);
+    if (!m || !m[2])
+        return null;
+    return ["dev", "design", "analyze"].includes(m[2]) ? m[2] : null;
+}
+function expectedWorkBranch(source, workingBranches, sessionBranches, flow) {
+    for (const entry of sessionBranches) {
+        if (!entry.includes(":"))
+            continue;
+        const [a, b] = entry.split(":", 2);
+        if (a?.trim() === source.alias && b?.trim())
+            return b.trim();
+    }
+    if (flow === "analyze")
+        return source.main_branch;
+    if (workingBranches[source.alias])
+        return workingBranches[source.alias] ?? null;
+    return null;
+}
+function formatBlockMessage(info) {
+    const lines = [
+        `[${info.displayName}] Rama de trabajo incorrecta para esta fuente.`,
+        `  Fuente:        ${info.alias} (${info.path})`,
+        `  Rama actual:   ${info.current}`,
+        `  Rama esperada: ${info.expected}`,
+    ];
+    if (info.dirty) {
+        let preview = info.changedFiles.slice(0, 5).join(", ");
+        if (info.changedFiles.length > 5)
+            preview += ", ...";
+        lines.push(`  Cambios sin commit (${info.changedFiles.length} archivo(s)): ${preview}`);
+        lines.push("");
+        lines.push("Pausar y avisar al usuario. NO ejecutar git stash/reset/clean/checkout. " +
+            "Esperar a que el usuario resuelva manualmente (commit / stash / discard) " +
+            "y luego reintentar la edicion.");
+    }
+    else {
+        lines.push("");
+        lines.push(`Pedir confirmacion al usuario para ejecutar \`git checkout ${info.expected}\` en esta fuente y luego reintentar la edicion.`);
+    }
+    lines.push("");
+    lines.push(`Referencia: ${REFERENCE_DOC}`);
+    return `${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=hook-branch-check.js.map

package/dist/application/hook-branch-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-branch-check.js","sourceRoot":"","sources":["../../src/application/hook-branch-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAGL,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAGpC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAClF,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAoBzE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAuB;IAC9D,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACpC,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAOD,KAAK,UAAU,wBAAwB,CAAC,KAAuB;IAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/C,MAAM,eAAe,GAAG,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAC3F,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAuB,EACvB,MAAsB;IAEtB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;IACrE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,kBAAkB,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;YAC9B,YAAY;YACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,gBAAgB;SACnD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAY,EAAE,QAAgB;IAC5D,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,SAAkB;IACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,GAAG,GAAG,SAAoC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,EAAkB,EAAE,GAAW,EAAE,KAAmB;IAC3E,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/E,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAwB,EAAE,QAAgB;IAClE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,OAA8B;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAqB,EACrB,eAAuC,EACvC,eAAyB,EACzB,IAAmB;IAEnB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACnC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC;IAClD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAChF,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,SAAS,kBAAkB,CAAC,IAAuB;IACjD,MAAM,KAAK,GAAa;QACtB,IAAI,IAAI,CAAC,WAAW,gDAAgD;QACpE,oBAAoB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,GAAG;QAC/C,oBAAoB,IAAI,CAAC,OAAO,EAAE;QAClC,oBAAoB,IAAI,CAAC,QAAQ,EAAE;KACpC,CAAC;IACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,OAAO,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,YAAY,CAAC,MAAM,iBAAiB,OAAO,EAAE,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,0EAA0E;YACxE,2EAA2E;YAC3E,gCAAgC,CACnC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,8DAA8D,IAAI,CAAC,QAAQ,kDAAkD,CAC9H,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,eAAe,aAAa,EAAE,CAAC,CAAC;IAC3C,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/application/hook-sql-mutation-guard.d.ts

@@ -0,0 +1,13 @@
+import type { EnvPort } from "../ports/env.js";
+import type { ResolvedRuntime } from "../runtime/types.js";
+export interface SqlGuardResult {
+    exitCode: 0 | 2;
+    stderr?: string;
+}
+export interface SqlGuardInput {
+    stdin: string;
+    env: EnvPort;
+    runtime: ResolvedRuntime;
+}
+export declare function runSqlMutationGuard(input: SqlGuardInput): SqlGuardResult;
+//# sourceMappingURL=hook-sql-mutation-guard.d.ts.map

package/dist/application/hook-sql-mutation-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-sql-mutation-guard.d.ts","sourceRoot":"","sources":["../../src/application/hook-sql-mutation-guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAoB3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,OAAO,CAAC;IACb,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CAgCxE"}

package/dist/application/hook-sql-mutation-guard.js

@@ -0,0 +1,119 @@
+const MUTATION_KEYWORDS = [
+    "INSERT",
+    "UPDATE",
+    "DELETE",
+    "TRUNCATE",
+    "MERGE",
+    "CREATE",
+    "ALTER",
+    "DROP",
+    "GRANT",
+    "REVOKE",
+    "COPY",
+];
+const MUTATION_PATTERN = new RegExp(`\\b(${MUTATION_KEYWORDS.join("|")})\\b`, "i");
+const COMMENT_LINE_RE = /--[^\n]*/g;
+const COMMENT_BLOCK_RE = /\/\*[\s\S]*?\*\//g;
+export function runSqlMutationGuard(input) {
+    const patterns = input.runtime.mcpGuards?.sqlMutation;
+    if (!patterns) {
+        // No config → guard disabled. Allow tool through.
+        return { exitCode: 0 };
+    }
+    if ((input.env.get("AW_SQL_GUARD") ?? "").toLowerCase() === "off") {
+        return { exitCode: 0 };
+    }
+    const payload = parsePayload(input.stdin);
+    if (!payload)
+        return { exitCode: 0 };
+    const compiled = compilePatterns(patterns);
+    if (!compiled)
+        return { exitCode: 0 };
+    const toolName = typeof payload.tool_name === "string" ? payload.tool_name : "";
+    if (!compiled.tool.test(toolName))
+        return { exitCode: 0 };
+    const serverMatch = toolName.match(compiled.server);
+    const serverFull = serverMatch?.[0] ?? "?";
+    const serverSuffix = serverMatch?.[1] ?? serverFull;
+    if (isAllowedServer(input.env, serverSuffix))
+        return { exitCode: 0 };
+    const sql = extractSql(payload.tool_input);
+    if (!sql)
+        return { exitCode: 0 };
+    const keyword = findMutation(sql);
+    if (keyword === null)
+        return { exitCode: 0 };
+    const display = input.runtime.displayName ?? "agent-workflow";
+    const msg = formatBlockMessage(toolName, serverFull, keyword, display);
+    return { exitCode: 2, stderr: msg };
+}
+function parsePayload(stdin) {
+    const raw = stdin.trim();
+    if (raw.length === 0)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed === "object" && parsed !== null
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function compilePatterns(patterns) {
+    try {
+        return {
+            tool: new RegExp(patterns.toolPattern),
+            server: new RegExp(patterns.serverPattern),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function isAllowedServer(env, serverSuffix) {
+    const allowEnv = (env.get("AW_SQL_GUARD_ALLOW") ?? "").toLowerCase();
+    if (allowEnv.length === 0)
+        return false;
+    const allowed = new Set(allowEnv.split(",").map((s) => s.trim()));
+    return allowed.has(serverSuffix);
+}
+function extractSql(toolInput) {
+    if (typeof toolInput !== "object" || toolInput === null)
+        return "";
+    const obj = toolInput;
+    for (const key of ["sql", "query", "statement", "command"]) {
+        const value = obj[key];
+        if (typeof value === "string" && value.trim().length > 0) {
+            return value;
+        }
+    }
+    return "";
+}
+function findMutation(sql) {
+    const cleaned = stripComments(sql);
+    const m = cleaned.match(MUTATION_PATTERN);
+    return m?.[1] ? m[1].toUpperCase() : null;
+}
+function stripComments(sql) {
+    return sql.replace(COMMENT_BLOCK_RE, " ").replace(COMMENT_LINE_RE, " ");
+}
+function formatBlockMessage(toolName, server, keyword, display) {
+    return `${[
+        `[${display} sql-mutation-guard] Bloqueado por shared-contract §30 (política BD universal).`,
+        `  Tool      : ${toolName}`,
+        `  Servidor  : ${server}`,
+        `  Keyword   : ${keyword}`,
+        "",
+        "Las mutaciones a BD (DML/DDL) NO se ejecutan desde una sesión.",
+        "Materializá el cambio como script SQL en docs/scripts/ del workspace",
+        "de la fuente y pedile al usuario que lo aplique manualmente.",
+        "",
+        "Para excepciones puntuales delegadas por el usuario, usar:",
+        "  AW_SQL_GUARD=off               # desactiva el hook por completo",
+        "  AW_SQL_GUARD_ALLOW=cert        # permite sólo cert (no prod)",
+        "",
+    ].join("\n")}\n`;
+}
+//# sourceMappingURL=hook-sql-mutation-guard.js.map

package/dist/application/hook-sql-mutation-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-sql-mutation-guard.js","sourceRoot":"","sources":["../../src/application/hook-sql-mutation-guard.ts"],"names":[],"mappings":"AAIA,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;CACP,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACnF,MAAM,eAAe,GAAG,WAAW,CAAC;AACpC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAa7C,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,kDAAkD;QAClD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAClE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAEtC,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAE1D,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IAC3C,MAAM,YAAY,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;IAEpD,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAErE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAE7C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC;IAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACvE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAGxB;IACC,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YACtC,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,YAAoB;IACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,SAAkB;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,SAAoC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAgB,EAChB,MAAc,EACd,OAAe,EACf,OAAe;IAEf,OAAO,GAAG;QACR,IAAI,OAAO,iFAAiF;QAC5F,iBAAiB,QAAQ,EAAE;QAC3B,iBAAiB,MAAM,EAAE;QACzB,iBAAiB,OAAO,EAAE;QAC1B,EAAE;QACF,gEAAgE;QAChE,sEAAsE;QACtE,8DAA8D;QAC9D,EAAE;QACF,4DAA4D;QAC5D,mEAAmE;QACnE,gEAAgE;QAChE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC"}

package/dist/application/markdown.d.ts

@@ -0,0 +1,4 @@
+export declare function parseMdValue(text: string, key: string): string | undefined;
+export declare function parseMdSection(text: string, heading: string): string | undefined;
+export declare function firstNonEmptyLine(text: string): string | undefined;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/application/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/application/markdown.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS1E;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA4BhF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQlE"}

package/dist/application/markdown.js

@@ -0,0 +1,53 @@
+export function parseMdValue(text, key) {
+    const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const re = new RegExp(`^\\s*[-*]?\\s*\\*{0,2}${escaped}\\*{0,2}\\s*[:=]\\s*(.+)$`, "im");
+    const match = text.match(re);
+    if (!match || !match[1]) {
+        return undefined;
+    }
+    const value = match[1].trim();
+    return value.length > 0 ? value : undefined;
+}
+export function parseMdSection(text, heading) {
+    const target = heading.trim().toLowerCase();
+    const lines = text.split("\n");
+    const headingRe = /^(#{1,6})\s+(.+?)\s*$/;
+    let captureFrom = null;
+    let captureLevel = 0;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (line === undefined)
+            continue;
+        const match = line.match(headingRe);
+        if (!match || !match[1] || !match[2])
+            continue;
+        const level = match[1].length;
+        const name = match[2].trim().toLowerCase();
+        if (captureFrom === null) {
+            if (name === target) {
+                captureFrom = i + 1;
+                captureLevel = level;
+            }
+        }
+        else if (level <= captureLevel) {
+            return joinTrim(lines.slice(captureFrom, i));
+        }
+    }
+    if (captureFrom !== null) {
+        return joinTrim(lines.slice(captureFrom));
+    }
+    return undefined;
+}
+export function firstNonEmptyLine(text) {
+    for (const raw of text.split("\n")) {
+        const line = raw.trim();
+        if (line.length > 0) {
+            return line;
+        }
+    }
+    return undefined;
+}
+function joinTrim(lines) {
+    return lines.join("\n").trim();
+}
+//# sourceMappingURL=markdown.js.map

package/dist/application/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/application/markdown.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,yBAAyB,OAAO,2BAA2B,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,uBAAuB,CAAC;IAE1C,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAe;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC"}

package/dist/application/mcp-dbhub-launcher.d.ts

@@ -0,0 +1,31 @@
+import type { PathsService } from "./paths-service.js";
+export interface DbhubLauncherDeps {
+    /** Returns process.env (or test override). */
+    env: Record<string, string | undefined>;
+    /** Path resolver — provides the dsn.env file location for the active namespace. */
+    paths: PathsService;
+    /** Returns `process.platform` (or test override). */
+    platform: NodeJS.Platform;
+}
+export interface DbhubResolvedDsn {
+    dsn: string;
+    source: "env" | "dsn.env";
+}
+export declare class DbhubLauncherError extends Error {
+    constructor(message: string);
+}
+export declare function dsnVarFor(instance: string): string;
+export declare function resolveDsn(instance: string, deps: DbhubLauncherDeps): DbhubResolvedDsn;
+export interface DbhubLauncherInput {
+    instance: string;
+    deps: DbhubLauncherDeps;
+}
+export interface DbhubLauncherResult {
+    exitCode: number;
+}
+/**
+ * Resolves DSN and spawns `npx -y @bytebase/dbhub` with stdio inherited.
+ * Resolves only when the spawned child exits.
+ */
+export declare function runDbhubLauncher(input: DbhubLauncherInput): Promise<DbhubLauncherResult>;
+//# sourceMappingURL=mcp-dbhub-launcher.d.ts.map

package/dist/application/mcp-dbhub-launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-dbhub-launcher.d.ts","sourceRoot":"","sources":["../../src/application/mcp-dbhub-launcher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,mFAAmF;IACnF,KAAK,EAAE,YAAY,CAAC;IACpB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,KAAK,GAAG,SAAS,CAAC;CAC3B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAID,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAatF;AAmBD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA4B9F"}

package/dist/application/mcp-dbhub-launcher.js

@@ -0,0 +1,84 @@
+// Launcher que resuelve DSN y spawnea `npx -y @bytebase/dbhub` con stdio inherit.
+import { spawn } from "node:child_process";
+import { readFileSync } from "node:fs";
+export class DbhubLauncherError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DbhubLauncherError";
+    }
+}
+const VALID_INSTANCES = new Set(["cert", "prod"]);
+export function dsnVarFor(instance) {
+    return instance === "prod" ? "DB_PROD_DSN" : "DB_CERT_DSN";
+}
+export function resolveDsn(instance, deps) {
+    const dsnVar = dsnVarFor(instance);
+    const fromEnv = deps.env[dsnVar];
+    if (fromEnv && fromEnv.length > 0) {
+        return { dsn: fromEnv, source: "env" };
+    }
+    const fromFile = loadDsnFromFile(deps.paths.userDsnFile())[dsnVar];
+    if (fromFile && fromFile.length > 0) {
+        return { dsn: fromFile, source: "dsn.env" };
+    }
+    throw new DbhubLauncherError(`[dbhub-mcp-runner] ${dsnVar} no visible — no está en process.env ni en ${deps.paths.userDsnFile()}. Asegurate de exportarlo en ~/.zshenv (macOS/Linux) o System Environment (Windows) y reiniciar Claude Code desde una terminal donde 'echo $${dsnVar}' devuelva valor.`);
+}
+function loadDsnFromFile(file) {
+    let raw;
+    try {
+        raw = readFileSync(file, "utf-8");
+    }
+    catch {
+        return {};
+    }
+    const out = {};
+    for (const line of raw.split(/\r?\n/)) {
+        const m = line.match(/^([A-Z_]+)=(.*)$/);
+        if (m?.[1] && m[2] !== undefined) {
+            out[m[1]] = m[2];
+        }
+    }
+    return out;
+}
+/**
+ * Resolves DSN and spawns `npx -y @bytebase/dbhub` with stdio inherited.
+ * Resolves only when the spawned child exits.
+ */
+export async function runDbhubLauncher(input) {
+    const instance = input.instance.toLowerCase();
+    if (!VALID_INSTANCES.has(instance)) {
+        throw new DbhubLauncherError(`[dbhub-mcp-runner] instance inválido '${input.instance}'; esperado 'cert' o 'prod'`);
+    }
+    const { dsn } = resolveDsn(instance, input.deps);
+    const isWin = input.deps.platform === "win32";
+    const cmd = isWin ? "npx.cmd" : "npx";
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, ["-y", "@bytebase/dbhub"], {
+            stdio: "inherit",
+            env: { ...input.deps.env, DSN: dsn },
+            shell: isWin,
+        });
+        child.on("error", (err) => reject(new DbhubLauncherError(`[dbhub-mcp-runner] ${err.message}`)));
+        child.on("exit", (code, signal) => {
+            if (signal) {
+                // Honor signal: emulate `process.kill(process.pid, signal)` from JS launcher
+                // by mapping to a non-zero exit. The CLI command will exit with that code.
+                resolve({ exitCode: 128 + (signalToNumber(signal) ?? 0) });
+            }
+            else {
+                resolve({ exitCode: code ?? 0 });
+            }
+        });
+    });
+}
+function signalToNumber(signal) {
+    // Common signals; fallback to null (will produce exitCode 128 + 0 = 128).
+    const map = {
+        SIGINT: 2,
+        SIGQUIT: 3,
+        SIGKILL: 9,
+        SIGTERM: 15,
+    };
+    return map[signal] ?? null;
+}
+//# sourceMappingURL=mcp-dbhub-launcher.js.map

package/dist/application/mcp-dbhub-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-dbhub-launcher.js","sourceRoot":"","sources":["../../src/application/mcp-dbhub-launcher.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiBvC,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAElD,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,IAAuB;IAClE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,kBAAkB,CAC1B,sBAAsB,MAAM,8CAA8C,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,+IAA+I,MAAM,mBAAmB,CAC3Q,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAyB;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,kBAAkB,CAC1B,yCAAyC,KAAK,CAAC,QAAQ,6BAA6B,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAEjD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE;YAClD,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;YACpC,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAChG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,IAAI,MAAM,EAAE,CAAC;gBACX,6EAA6E;gBAC7E,2EAA2E;gBAC3E,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,0EAA0E;IAC1E,MAAM,GAAG,GAA2B;QAClC,MAAM,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,EAAE;KACZ,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;AAC7B,CAAC"}

package/dist/application/multiroot-service.d.ts

@@ -0,0 +1,83 @@
+import type { EnvPort } from "../ports/env.js";
+import type { FileSystemPort } from "../ports/file-system.js";
+import type { PathsService } from "./paths-service.js";
+export interface MultirootInput {
+    paths?: string[];
+    pathsCsv?: string;
+    fromSources?: boolean;
+    useGlobal?: boolean;
+    workspace?: string;
+    skipClaude?: boolean;
+    skipCodex?: boolean;
+}
+export interface MultirootError {
+    error: string;
+    hint?: string;
+}
+export interface MultirootResult {
+    scope: "global" | "workspace";
+    scope_dir: string;
+    paths_input: string[];
+    claude: ClaudeResult | {
+        skipped: true;
+    };
+    codex: CodexResult | {
+        skipped: true;
+    };
+}
+interface ClaudeAttachOk {
+    file: string;
+    backup: string | null;
+    added: string[];
+    already_present: string[];
+    written: boolean;
+}
+interface ClaudeDetachOk {
+    file: string;
+    backup: string | null;
+    removed: string[];
+    not_present: string[];
+    written: boolean;
+}
+interface ClaudeFail {
+    file: string;
+    error: string;
+    detail?: string;
+    skipped: true;
+}
+type ClaudeResult = ClaudeAttachOk | ClaudeDetachOk | ClaudeFail;
+interface CodexAttachOk {
+    file: string;
+    backup: string | null;
+    additional_writable_roots: {
+        added: string[];
+        already_present: string[];
+    };
+    projects_trusted: {
+        added: string[];
+        already_present: string[];
+    };
+    written: boolean;
+}
+interface CodexDetachOk {
+    file: string;
+    backup: string | null;
+    additional_writable_roots: {
+        removed: string[];
+        not_present: string[];
+    };
+    projects_trusted: {
+        removed: string[];
+        not_present: string[];
+        skipped: {
+            path: string;
+            reason: string;
+        }[];
+    };
+    written: boolean;
+}
+type CodexResult = CodexAttachOk | CodexDetachOk;
+type Mode = "attach" | "detach";
+export declare function runMultiroot(fs: FileSystemPort, env: EnvPort, pathsService: PathsService, mode: Mode, input: MultirootInput): Promise<MultirootResult | MultirootError>;
+export {};
+//# sourceMappingURL=multiroot-service.d.ts.map

package/dist/application/multiroot-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiroot-service.d.ts","sourceRoot":"","sources":["../../src/application/multiroot-service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,YAAY,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IACzC,KAAK,EAAE,WAAW,GAAG;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;CACxC;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AACD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AACD,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;CACf;AACD,KAAK,YAAY,GAAG,cAAc,GAAG,cAAc,GAAG,UAAU,CAAC;AAEjE,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yBAAyB,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1E,gBAAgB,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACjE,OAAO,EAAE,OAAO,CAAC;CAClB;AACD,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yBAAyB,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACxE,gBAAgB,EAAE;QAChB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC7C,CAAC;IACF,OAAO,EAAE,OAAO,CAAC;CAClB;AACD,KAAK,WAAW,GAAG,aAAa,GAAG,aAAa,CAAC;AAEjD,KAAK,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhC,wBAAsB,YAAY,CAChC,EAAE,EAAE,cAAc,EAClB,GAAG,EAAE,OAAO,EACZ,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,eAAe,GAAG,cAAc,CAAC,CAgC3C"}