agent-first-psql 0.6.2

A PostgreSQL interface for AI agents: reliable, structured, explicit, and read-only by default.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

{
  "$schema": "https://cmn.dev/schemas/v1/spore-core.json",
  "id": "agent-first-psql",
  "name": "Agent-First PSQL",
  "version": "0.6.2",
  "domain": "agentfirstkit.com",
  "key": "ed25519.BwbSzqdDYyMN1pPW5snRk3afrJAovHn8aueMvDpfNKVw",
  "synopsis": "A PostgreSQL interface for AI agents: reliable, structured, explicit, and read-only by default.",
  "intent": [
    "Give AI agents a persistent PostgreSQL client that reuses long-lived database connections and sessions, so agents send SQL requests as JSONL and receive structured JSONL responses without managing connection setup",
    "Bridge ad-hoc psql shell usage and protocol-specific integrations by providing transport-neutral, agent-native request and response framing",
    "Provide predictable machine-readable outputs for row sets, command status, and errors so agent workflows can branch without parsing human-formatted terminal output"
  ],
  "license": "MIT",
  "mutations": [
    "Generalize docker transport into a container transport family covering docker, podman, nerdctl, compose, and kubectl, with structured scope flags (--container-context, --container-namespace, --container-compose-file, --container-compose-project, --container-pod-container) instead of raw driver argv passthrough",
    "Support --ssh + --container as one local transport chain so agents can reach containers on remote SSH hosts without SSHing in and running container-local psql; permission family stays container",
    "Add session_info pipe request that returns the named session's transport_kind, permission_default, stream/batch defaults, inline limits, and timeouts so agents can introspect their session instead of probing limits with failing queries",
    "Emit mode.permission_default_changed log event when --mode psql bypasses the native read-only default, and connect.libpq_env_fallback log event when libpq PG* variables silently fill connection fields not given via flags or secrets",
    "Harden container exec bridge handshake with a per-connection 16-byte hex nonce on the AFPSQL_BRIDGE_OK ready banner and sanitize captured bridge stderr before placing it on ConnectError.hint",
    "Backfill actionable hint fields on the remaining Output::Error paths (cancelled, invalid_params, internal, duplicate id, finished, missing id) so every error_code dispatch has a hint",
    "Slim skills/agent-first-psql.md to behavior/decision/recovery rules only; flag enumerations belong in afpsql --help, not the skill, with this principle recorded in docs/design.md"
  ],
  "bonds": [
    {
      "relation": "depends_on",
      "uri": "cmn://agentfirstkit.com/b3.DLwVyPLJRtv7KwfXD25E7zkpveZVykRgo2RQJkHp9zZZ",
      "id": "agent-first-data",
      "reason": "All request/response fields use Agent-First Data suffix conventions and output formats"
    }
  ],
  "tree": {
    "algorithm": "blob_tree_blake3_nfc",
    "exclude_names": [
      ".git",
      ".cmn"
    ],
    "follow_rules": [
      ".gitignore"
    ]
  }
}