komplian 0.5.0 → 0.5.2

package/KOMPLIAN_DATABASE_URLS.env.example

@@ -12,7 +12,7 @@ KOMPLIAN_DATABASE_URL_ADMIN_STAGING=
 KOMPLIAN_DATABASE_URL_ADMIN_PRODUCTION=
 
 # --- Web / pilot DB ---
-KOMPLIAN_DATABASE_URL_WEB_DEVELOPMENT=
+KOMPLIAN_DATABASE_URL_WEB_DEVELOPMENT=postgresql://neondb_owner:npg_1crYb3PaCjlf@ep-frosty-bird-agql4oq5-pooler.c-2.eu-central-1.aws.neon.tech/neondb?sslmode=require&channel_binding=require
 KOMPLIAN_DATABASE_URL_WEB_STAGING=
 KOMPLIAN_DATABASE_URL_WEB_PRODUCTION=
 
@@ -22,5 +22,7 @@ KOMPLIAN_DATABASE_URL_WEB_PRODUCTION=
 # Operador para comprobar acceso a producción (alternativa: git config user.email).
 # KOMPLIAN_DATABASE_OPERATOR_EMAIL=josue.santana@komplian.com
 
-# Solo si NO usas Neon (p. ej. Postgres local en Docker):
+# Staging/producción: host debe ser Neon (*.neon.tech), salvo:
 # KOMPLIAN_DATABASE_ALLOW_NON_NEON=1
+# Development: Postgres local está permitido (mensaje informativo). Para exigir Neon también en dev:
+# KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT=1

package/komplian-db.mjs

@@ -16,7 +16,8 @@
  * Producción: solo emails @komplian.com en KOMPLIAN_DATABASE_PRODUCTION_ALLOWLIST
  * (por defecto josue.santana@komplian.com). Operador: KOMPLIAN_DATABASE_OPERATOR_EMAIL o git config user.email.
  *
- * Neon: host debe ser *.neon.tech salvo KOMPLIAN_DATABASE_ALLOW_NON_NEON=1
+ * Neon: staging/producción exigen *.neon.tech (salvo KOMPLIAN_DATABASE_ALLOW_NON_NEON=1).
+ * Development: permite host no Neon (Postgres local); aviso en consola. Forzar Neon en dev: KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT=1
  */
 
 import { spawn, spawnSync } from "node:child_process";
@@ -52,6 +53,29 @@ const ENVIRONMENTS = new Set(["development", "staging", "production"]);
 /** Lista por defecto si no configuras KOMPLIAN_DATABASE_PRODUCTION_ALLOWLIST */
 const DEFAULT_PRODUCTION_ALLOWLIST = ["josue.santana@komplian.com"];
 
+/** Misma cadena que `komplian-localhost.mjs` cuando no hay URL real. */
+const LOCALHOST_DB_PLACEHOLDER = "komplian_localhost_placeholder";
+
+function assertNotPlaceholderDbUrl(url, platform, environment) {
+  if (!url.includes(LOCALHOST_DB_PLACEHOLDER)) return;
+  const key = platformToDbKey(platform);
+  log(
+    `${c.red}✗${c.reset} La URL es el ${c.bold}placeholder${c.reset} de \`komplian localhost\` (no apunta a una base de datos real).`
+  );
+  log(``);
+  log(`  Pon una URL real en la raíz del monorepo, por ejemplo:`);
+  log(
+    `  ${c.dim}KOMPLIAN_LOCALHOST_${key}_DATABASE_URL=postgresql://…${c.reset}`
+  );
+  log(
+    `  o ${c.dim}KOMPLIAN_DATABASE_URL_${key}_${environment.toUpperCase()}=…${c.reset} en ${c.dim}KOMPLIAN_DATABASE_URLS.env${c.reset}`
+  );
+  log(
+    `  (${c.dim}KOMPLIAN_LOCALHOST_SECRETS.env${c.reset} / ${c.dim}.komplian/${c.reset}…). Luego vuelve a ejecutar el comando.`
+  );
+  process.exit(1);
+}
+
 function parseEnvFile(content) {
   const out = {};
   for (const line of content.split(/\r?\n/)) {
@@ -170,17 +194,31 @@ function loadProductionAllowlist(workspaceRoot) {
   return DEFAULT_PRODUCTION_ALLOWLIST.map((e) => e.toLowerCase());
 }
 
-function assertNeonHost(url) {
+function assertNeonHost(url, environment) {
   if (process.env.KOMPLIAN_DATABASE_ALLOW_NON_NEON === "1") return;
   try {
     const u = new URL(url);
     const h = u.hostname.toLowerCase();
-    if (!h.includes("neon.tech")) {
+    const isNeon = h.includes("neon.tech");
+    if (isNeon) return;
+
+    if (environment === "development") {
+      if (process.env.KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT === "1") {
+        log(
+          `${c.red}✗${c.reset} Development: host no Neon (${u.hostname}). Quita ${c.dim}KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT${c.reset} o usa URL *.neon.tech.`
+        );
+        process.exit(1);
+      }
       log(
-        `${c.red}✗${c.reset} Solo hosts Neon (postgresql://*.neon.tech). Para excepciones: ${c.dim}KOMPLIAN_DATABASE_ALLOW_NON_NEON=1${c.reset}`
+        `${c.dim}○${c.reset} Development: conexión no Neon (${u.hostname}). Staging/producción siguen exigiendo *.neon.tech.`
       );
-      process.exit(1);
+      return;
     }
+
+    log(
+      `${c.red}✗${c.reset} Solo hosts Neon (postgresql://*.neon.tech). Para excepciones: ${c.dim}KOMPLIAN_DATABASE_ALLOW_NON_NEON=1${c.reset}`
+    );
+    process.exit(1);
   } catch {
     log(`${c.red}✗${c.reset} URL de base de datos inválida.`);
     process.exit(1);
@@ -342,6 +380,7 @@ function usageDb() {
   log(`  ${c.dim}KOMPLIAN_DATABASE_URL_APP_DEVELOPMENT${c.reset}`);
   log(`  ${c.dim}KOMPLIAN_DATABASE_URL_APP_STAGING / _PRODUCTION${c.reset} (idem ADMIN, WEB)`);
   log(`  Archivo opcional: ${c.dim}KOMPLIAN_DATABASE_URLS.env${c.reset} (gitignored)`);
+  log(`  Neon: ${c.dim}staging/producción${c.reset} exigen host *.neon.tech; ${c.dim}development${c.reset} permite Postgres local (aviso).`);
   log(``);
   log(`  Producción:`);
   log(`  ${c.dim}KOMPLIAN_DATABASE_OPERATOR_EMAIL${c.reset} o git user.email`);
@@ -410,7 +449,9 @@ export async function runDb(argv) {
     process.exit(1);
   }
 
-  assertNeonHost(url);
+  assertNotPlaceholderDbUrl(url, opts.platform, opts.environment);
+
+  assertNeonHost(url, opts.environment);
 
   const psql = findPsqlBinary();
   if (!psql) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "komplian",
-  "version": "0.5.0",
+  "version": "0.5.2",
   "description": "Komplian CLI: onboard, Postman, localhost, mcp-tools, db (psql). Node 18+. Published tarball has no .env / secrets.",
   "type": "module",
   "engines": {