komplian 0.5.0 → 0.5.3

package/KOMPLIAN_DATABASE_URLS.env.example

@@ -12,7 +12,7 @@ KOMPLIAN_DATABASE_URL_ADMIN_STAGING=
 KOMPLIAN_DATABASE_URL_ADMIN_PRODUCTION=
 
 # --- Web / pilot DB ---
-KOMPLIAN_DATABASE_URL_WEB_DEVELOPMENT=
+KOMPLIAN_DATABASE_URL_WEB_DEVELOPMENT=postgresql://neondb_owner:npg_1crYb3PaCjlf@ep-frosty-bird-agql4oq5-pooler.c-2.eu-central-1.aws.neon.tech/neondb?sslmode=require&channel_binding=require
 KOMPLIAN_DATABASE_URL_WEB_STAGING=
 KOMPLIAN_DATABASE_URL_WEB_PRODUCTION=
 
@@ -22,5 +22,7 @@ KOMPLIAN_DATABASE_URL_WEB_PRODUCTION=
 # Operador para comprobar acceso a producción (alternativa: git config user.email).
 # KOMPLIAN_DATABASE_OPERATOR_EMAIL=josue.santana@komplian.com
 
-# Solo si NO usas Neon (p. ej. Postgres local en Docker):
+# Staging/producción: host debe ser Neon (*.neon.tech), salvo:
 # KOMPLIAN_DATABASE_ALLOW_NON_NEON=1
+# Development: Postgres local está permitido (mensaje informativo). Para exigir Neon también en dev:
+# KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT=1

package/komplian-db.mjs

@@ -16,7 +16,8 @@
  * Producción: solo emails @komplian.com en KOMPLIAN_DATABASE_PRODUCTION_ALLOWLIST
  * (por defecto josue.santana@komplian.com). Operador: KOMPLIAN_DATABASE_OPERATOR_EMAIL o git config user.email.
  *
- * Neon: host debe ser *.neon.tech salvo KOMPLIAN_DATABASE_ALLOW_NON_NEON=1
+ * Neon: staging/producción exigen *.neon.tech (salvo KOMPLIAN_DATABASE_ALLOW_NON_NEON=1).
+ * Development: permite host no Neon (Postgres local); aviso en consola. Forzar Neon en dev: KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT=1
  */
 
 import { spawn, spawnSync } from "node:child_process";
@@ -52,6 +53,32 @@ const ENVIRONMENTS = new Set(["development", "staging", "production"]);
 /** Lista por defecto si no configuras KOMPLIAN_DATABASE_PRODUCTION_ALLOWLIST */
 const DEFAULT_PRODUCTION_ALLOWLIST = ["josue.santana@komplian.com"];
 
+/** Misma cadena que `komplian-localhost.mjs` cuando no hay URL real. */
+const LOCALHOST_DB_PLACEHOLDER = "komplian_localhost_placeholder";
+
+function isPlaceholderDbUrl(url) {
+  return !!(url && String(url).includes(LOCALHOST_DB_PLACEHOLDER));
+}
+
+/** Primera URL no vacía que no sea el placeholder de localhost. */
+function pickFirstNonPlaceholder(...candidates) {
+  for (const c of candidates) {
+    const u = (c ?? "").trim();
+    if (u && !isPlaceholderDbUrl(u)) return u;
+  }
+  return "";
+}
+
+function assertNotPlaceholderDbUrl(url) {
+  if (!isPlaceholderDbUrl(url)) return;
+  log(
+    `${c.red}✗${c.reset} La URL es el ${c.bold}placeholder${c.reset} de \`komplian localhost\` (no apunta a una base de datos real).`
+  );
+  log(``);
+  log(`  Pon una URL real (raíz del monorepo: ${c.dim}KOMPLIAN_LOCALHOST_*_DATABASE_URL${c.reset}, ${c.dim}KOMPLIAN_DATABASE_URLS.env${c.reset}, o ${c.dim}--url${c.reset}).`);
+  process.exit(1);
+}
+
 function parseEnvFile(content) {
   const out = {};
   for (const line of content.split(/\r?\n/)) {
@@ -170,17 +197,31 @@ function loadProductionAllowlist(workspaceRoot) {
   return DEFAULT_PRODUCTION_ALLOWLIST.map((e) => e.toLowerCase());
 }
 
-function assertNeonHost(url) {
+function assertNeonHost(url, environment) {
   if (process.env.KOMPLIAN_DATABASE_ALLOW_NON_NEON === "1") return;
   try {
     const u = new URL(url);
     const h = u.hostname.toLowerCase();
-    if (!h.includes("neon.tech")) {
+    const isNeon = h.includes("neon.tech");
+    if (isNeon) return;
+
+    if (environment === "development") {
+      if (process.env.KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT === "1") {
+        log(
+          `${c.red}✗${c.reset} Development: host no Neon (${u.hostname}). Quita ${c.dim}KOMPLIAN_DATABASE_REQUIRE_NEON_DEVELOPMENT${c.reset} o usa URL *.neon.tech.`
+        );
+        process.exit(1);
+      }
       log(
-        `${c.red}✗${c.reset} Solo hosts Neon (postgresql://*.neon.tech). Para excepciones: ${c.dim}KOMPLIAN_DATABASE_ALLOW_NON_NEON=1${c.reset}`
+        `${c.dim}○${c.reset} Development: conexión no Neon (${u.hostname}). Staging/producción siguen exigiendo *.neon.tech.`
       );
-      process.exit(1);
+      return;
     }
+
+    log(
+      `${c.red}✗${c.reset} Solo hosts Neon (postgresql://*.neon.tech). Para excepciones: ${c.dim}KOMPLIAN_DATABASE_ALLOW_NON_NEON=1${c.reset}`
+    );
+    process.exit(1);
   } catch {
     log(`${c.red}✗${c.reset} URL de base de datos inválida.`);
     process.exit(1);
@@ -230,34 +271,40 @@ function resolveDatabaseUrl(workspaceRoot, platform, environment) {
   const envU = environment.toUpperCase();
   const primaryKey = `KOMPLIAN_DATABASE_URL_${dbKey}_${envU}`;
 
-  let url =
-    process.env[primaryKey]?.trim() || file[primaryKey]?.trim() || "";
+  let url = pickFirstNonPlaceholder(
+    process.env[primaryKey],
+    file[primaryKey]
+  );
 
   if (environment === "development" && !url) {
-    const single =
-      process.env.KOMPLIAN_LOCALHOST_DATABASE_URL?.trim() ||
-      file.KOMPLIAN_LOCALHOST_DATABASE_URL?.trim();
+    const single = pickFirstNonPlaceholder(
+      process.env.KOMPLIAN_LOCALHOST_DATABASE_URL,
+      file.KOMPLIAN_LOCALHOST_DATABASE_URL
+    );
     if (dbKey === "APP") {
-      url =
-        process.env.KOMPLIAN_LOCALHOST_APP_DATABASE_URL?.trim() ||
-        file.KOMPLIAN_LOCALHOST_APP_DATABASE_URL?.trim() ||
-        single ||
-        readEnvLocalKey(workspaceRoot, "app", ["DATABASE_URL"]) ||
-        readEnvLocalKey(workspaceRoot, "api", ["APP_DATABASE_URL"]);
+      url = pickFirstNonPlaceholder(
+        process.env.KOMPLIAN_LOCALHOST_APP_DATABASE_URL,
+        file.KOMPLIAN_LOCALHOST_APP_DATABASE_URL,
+        single,
+        readEnvLocalKey(workspaceRoot, "app", ["DATABASE_URL"]),
+        readEnvLocalKey(workspaceRoot, "api", ["APP_DATABASE_URL"])
+      );
     } else if (dbKey === "ADMIN") {
-      url =
-        process.env.KOMPLIAN_LOCALHOST_ADMIN_DATABASE_URL?.trim() ||
-        file.KOMPLIAN_LOCALHOST_ADMIN_DATABASE_URL?.trim() ||
-        single ||
-        readEnvLocalKey(workspaceRoot, "admin", ["DATABASE_URL"]) ||
-        readEnvLocalKey(workspaceRoot, "api", ["ADMIN_DATABASE_URL"]);
+      url = pickFirstNonPlaceholder(
+        process.env.KOMPLIAN_LOCALHOST_ADMIN_DATABASE_URL,
+        file.KOMPLIAN_LOCALHOST_ADMIN_DATABASE_URL,
+        single,
+        readEnvLocalKey(workspaceRoot, "admin", ["DATABASE_URL"]),
+        readEnvLocalKey(workspaceRoot, "api", ["ADMIN_DATABASE_URL"])
+      );
     } else if (dbKey === "WEB") {
-      url =
-        process.env.KOMPLIAN_LOCALHOST_WEB_DATABASE_URL?.trim() ||
-        file.KOMPLIAN_LOCALHOST_WEB_DATABASE_URL?.trim() ||
-        single ||
-        readEnvLocalKey(workspaceRoot, "web", ["DATABASE_URL"]) ||
-        readEnvLocalKey(workspaceRoot, "api", ["WEB_DATABASE_URL"]);
+      url = pickFirstNonPlaceholder(
+        process.env.KOMPLIAN_LOCALHOST_WEB_DATABASE_URL,
+        file.KOMPLIAN_LOCALHOST_WEB_DATABASE_URL,
+        single,
+        readEnvLocalKey(workspaceRoot, "web", ["DATABASE_URL"]),
+        readEnvLocalKey(workspaceRoot, "api", ["WEB_DATABASE_URL"])
+      );
     }
   }
 
@@ -342,6 +389,7 @@ function usageDb() {
   log(`  ${c.dim}KOMPLIAN_DATABASE_URL_APP_DEVELOPMENT${c.reset}`);
   log(`  ${c.dim}KOMPLIAN_DATABASE_URL_APP_STAGING / _PRODUCTION${c.reset} (idem ADMIN, WEB)`);
   log(`  Archivo opcional: ${c.dim}KOMPLIAN_DATABASE_URLS.env${c.reset} (gitignored)`);
+  log(`  Neon: ${c.dim}staging/producción${c.reset} exigen host *.neon.tech; ${c.dim}development${c.reset} permite Postgres local (aviso).`);
   log(``);
   log(`  Producción:`);
   log(`  ${c.dim}KOMPLIAN_DATABASE_OPERATOR_EMAIL${c.reset} o git user.email`);
@@ -407,10 +455,17 @@ export async function runDb(argv) {
     log(
       `  Define ${c.bold}KOMPLIAN_DATABASE_URL_${platformToDbKey(opts.platform)}_${opts.environment.toUpperCase()}${c.reset} o ${c.dim}KOMPLIAN_DATABASE_URLS.env${c.reset}.`
     );
+    if (opts.environment === "development") {
+      log(
+        `  ${c.dim}(Los valores con ${LOCALHOST_DB_PLACEHOLDER} en .env.local se ignoran; usa una URL real en la raíz del monorepo.)${c.reset}`
+      );
+    }
     process.exit(1);
   }
 
-  assertNeonHost(url);
+  assertNotPlaceholderDbUrl(url);
+
+  assertNeonHost(url, opts.environment);
 
   const psql = findPsqlBinary();
   if (!psql) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "komplian",
-  "version": "0.5.0",
+  "version": "0.5.3",
   "description": "Komplian CLI: onboard, Postman, localhost, mcp-tools, db (psql). Node 18+. Published tarball has no .env / secrets.",
   "type": "module",
   "engines": {