Repository navigation

feat: agent CLI — database access for AI agents, with approval-gated writes - #19

Merged

matej21 merged 40 commits into

mainfrom

feat/agent-cli

Nov 3, 2026

Merged

feat: agent CLI — database access for AI agents, with approval-gated writes#19
matej21 merged 40 commits into
mainfrom
feat/agent-cli

Commits on Nov 2, 2026
- docs: add agent CLI specification
  
  matej21
  and
  claude
  committed
  3781ad8
- feat: add shared types for the agent CLI
  
  matej21
  and
  claude
  committed
  bafa3d9
- refactor: extract transport-agnostic RPC dispatch
  
  matej21
  and
  claude
  committed
  c02599c
- feat: engine-enforced read-only database sessions
  
  matej21
  and
  claude
  committed
  c25b9ed
- feat: add write proposals and the agent/ui RPC surface
  
  matej21
  and
  claude
  committed
  cfdd035
- feat: serve a local control endpoint for the CLI
  
  matej21
  and
  claude
  committed
  14bc126
- feat: approve agent write proposals in the app
  
  matej21
  and
  claude
  committed
  5e0834a
- refactor: split the UI snapshot publisher from its pure mapping
  
  matej21
  and
  claude
  committed
  3bfe647
- feat: add the dotaz CLI client
  
  matej21
  and
  claude
  committed
  8a8b608
- docs: add the dotaz agent skill and document the CLI package
  
  matej21
  and
  claude
  committed
  3ace25e
- docs: describe the approval-gated write path, not just reads
  
  matej21
  and
  claude
  committed
  aa9615b
- feat: cap read-only sessions with an engine statement timeout
  
  matej21
  and
  claude
  committed
  f76a06c
- fix: one control endpoint per instance, not per user
  
  matej21
  and
  claude
  committed
  d7be653
- fix: cancel abandoned queries, push --limit into SQL, add bookmarks
  
  matej21
  and
  claude
  committed
  212c1ab
- fix: wire --instance and document what shutdown actually cleans up
  
  matej21
  and
  claude
  committed
  a7a7515
- fix: invalidate an approval banner whose proposal is already gone
  
  matej21
  and
  claude
  committed
  5dca4e3
- fix: make read-only sessions survive statements that try to revoke them
  
  matej21
  and
  claude
  committed
  cdbf2a5
- fix: enforce the CLI's read-only guarantee at the endpoint, not in the client
  
  matej21
  and
  claude
  committed
  af49a78
- fix: resolve a proposal only when the proposed SQL is what ran
  
  matej21
  and
  claude
  committed
  e0ecd87
- fix: stop --quiet hiding truncation, and --timeout meaning two things
  
  matej21
  and
  claude
  committed
  65cda15
- docs: say what actually enforces the read-only invariant
  
  matej21
  and
  claude
  committed
  f42f0fb
- fix: make agent sessions backend-owned
  matej21
  committed
  26954bd
- feat: publish the agent CLI on npm
  matej21
  committed
  0f31dd3
- fix: close the two holes in the where-fragment scanner
  
  matej21
  and
  claude
  committed
  a837a03
- fix: reject multi-statement SQL in read-only agent sessions
  
  authored and
  matej21
  committed
  60fab01
- fix: stop the CLI control server timing out slow requests
  
  authored and
  matej21
  committed
  76f7259
- fix: close the remaining ways agent SQL could write without approval
  
  matej21
  and
  claude
  committed
  4b7bb2e
- fix: claim a proposal before its SQL runs
  
  matej21
  and
  claude
  committed
  1d59703
- fix: report whether a CLI query cancel actually stopped anything
  
  matej21
  and
  claude
  committed
  c9f967d
- fix: parse CLI endpoint params where they enter
  
  matej21
  and
  claude
  committed
  035b977
- chore: drop the control server's type cast and a raw NUL byte
  
  matej21
  and
  claude
  committed
  bc50d8e
- fix: fail closed on three more scanner and engine lexer disagreements
  
  matej21
  and
  claude
  committed
  2dea90b
- fix: close the proposal paths that skipped the claim
  
  matej21
  and
  claude
  committed
  e746ce7
- fix: fail closed on MySQL executable comments and SQLite Tcl variables
  
  matej21
  and
  claude
  committed
  33c5c5b
- fix: refuse multi-statement EXPLAIN and multibyte charsets in read-only sessions
  
  matej21
  and
  claude
  committed
  9e02747
- fix: keep a claimed run's outcome, and refuse pieces of a cancelled proposal
  
  matej21
  and
  claude
  committed
  b21bda7
- fix: keep a reconnected MySQL read-only session read-only
  
  matej21
  and
  claude
  committed
  dd32e5f
- fix: fail closed on SQLite Tcl variables whose name contains `$`
  
  matej21
  and
  claude
  committed
  9f187ef
- fix: keep a formatted cancelled proposal refused
  
  matej21
  and
  claude
  committed
  3863280
- fix: keep reconnected read-only sessions read-only inside transactions
  
  matej21
  and
  claude
  committed
  2cecc87

Commits

Commits on Nov 2, 2026