@intentius/sql-yodeler 0.3.0 → 0.5.0

package/dist/lint/index.js

@@ -5,6 +5,7 @@
  *   migrationSilences(m)           a migration's `-- yodel:allow` lines, as the history records them
  *   updateChecksum(m)              writes migration.json's checksum to match its files
  *   renderLint / lintJson          the output; lintExitCode the exit code
+ *   workflowCommands / codeQuality the findings as forge annotations (#129)
  *
  * The rules are in `./rules.ts`, how a silence is read in `./silences.ts`.
  */
@@ -13,12 +14,15 @@ import { join } from "node:path";
 import { MIGRATION_JSON, serializeDocument, verifyChecksum } from "../migrations/index.js";
 import { silenceableRules } from "./rules.js";
 import { mapMigrationSql, silencesJson } from "./silences.js";
+export * from "./annotations.js";
 export * from "./check.js";
 export * from "./config.js";
 export * from "./report.js";
 export * from "./rules.js";
 export * from "./silences.js";
 export * from "./statements.js";
+export * from "./naming.js";
+export { SCHEMA_RULES, isSchemaRule, schemaDiagnostics, chantLevel } from "./schema-checks.js";
 /** The well-formed `-- yodel:allow` lines of a migration, each with the step it is above. */
 export function silencesOf(m) {
     return mapMigrationSql(m.files.sql, m.document.steps, new Set(silenceableRules())).silences;

package/dist/lint/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lint/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAkB,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAgB,MAAM,eAAe,CAAC;AAE5E,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAEhC,6FAA6F;AAC7F,MAAM,UAAU,UAAU,CAAC,CAAwC;IACjE,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,CAAS,gBAAgB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtG,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAwC,EAAU,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,CAAY;IACzC,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,cAAc,WAAW,CAAC,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,GAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAA6B,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5H,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lint/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAkB,MAAM,wBAAwB,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAgB,MAAM,eAAe,CAAC;AAE5E,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAyB,MAAM,oBAAoB,CAAC;AAEtH,6FAA6F;AAC7F,MAAM,UAAU,UAAU,CAAC,CAAwC;IACjE,OAAO,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,CAAS,gBAAgB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtG,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAwC,EAAU,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEnH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,CAAY;IACzC,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,cAAc,WAAW,CAAC,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,GAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAA6B,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5H,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACpD,CAAC"}

package/dist/lint/naming.d.ts

@@ -0,0 +1,62 @@
+/**
+ * `naming` (#51): names a migration gives that break the project's naming
+ * rules, set per kind of object in `yodel.config.ts`:
+ *
+ * ```ts
+ * export default defineConfig({
+ *   lint: { naming: { table: "snake_case", column: "snake_case", index: "[a-z_]+_idx", constraint: "[a-z_]+_(pkey|key|fkey|check)" } },
+ * });
+ * ```
+ *
+ * A rule is a preset (`snake_case`, `camelCase`, `PascalCase`) or a regular
+ * expression the whole name must match. Only the names a migration adds are
+ * checked: a table, column, index or named constraint in its recorded schema
+ * that its parent's does not have. A name already there is not reported
+ * again, so turning a rule on does not fail the migrations already written.
+ * An unnamed constraint (the server names it) is not checked.
+ *
+ * Read from the recorded schemas with the lexicon's own parser: the names
+ * are the server's (Postgres folds an unquoted name to lower case). Each
+ * finding is at the migration's first step on the object, so a
+ * `-- yodel:allow naming <reason>` line above it silences it.
+ */
+import type { BuildOutput } from "../chant/build.js";
+import type { Migration } from "../migrations/index.js";
+export declare const NAMING_KINDS: readonly ["table", "column", "index", "constraint"];
+export type NamingKind = (typeof NAMING_KINDS)[number];
+export declare const NAMING_PRESETS: Readonly<Record<string, string>>;
+/** One kind's rule, as `yodel.config.ts` gives it and compiled. */
+export interface NamingRule {
+    /** As written: a preset name or a regular expression. */
+    rule: string;
+    pattern: RegExp;
+}
+export type NamingSettings = Partial<Record<NamingKind, NamingRule>>;
+/** Reads `lint.naming`; a key that is not a kind, or a rule that is not a preset or a valid expression, is an error naming `where`. */
+export declare function namingSettings(raw: unknown, where?: string): NamingSettings;
+/** A name a recorded schema gives. */
+interface Named {
+    kind: NamingKind;
+    /** Unique within the schema: the object, and for a column, index or constraint its table. */
+    key: string;
+    name: string;
+    /** The declaration's export, which a step on the object names. */
+    export: string;
+    /** How a message names it: `table shop.orders`, `column note of shop.orders`. */
+    label: string;
+}
+/** The names of a recorded schema, by kind; `[]` for one the lexicon cannot read (lint reports that on its own). */
+export declare function schemaNames(build: BuildOutput, options?: {
+    defaultDatabase?: string | undefined;
+    defaultSchema?: string | undefined;
+}): Named[];
+export interface NamingFinding {
+    rule: "naming";
+    migration: string;
+    step?: number;
+    object?: string;
+    message: string;
+}
+/** The names each migration adds that break `settings`. */
+export declare function namingFindings(migrations: readonly Migration[], settings: NamingSettings): NamingFinding[];
+export {};

package/dist/lint/naming.js

@@ -0,0 +1,138 @@
+/**
+ * `naming` (#51): names a migration gives that break the project's naming
+ * rules, set per kind of object in `yodel.config.ts`:
+ *
+ * ```ts
+ * export default defineConfig({
+ *   lint: { naming: { table: "snake_case", column: "snake_case", index: "[a-z_]+_idx", constraint: "[a-z_]+_(pkey|key|fkey|check)" } },
+ * });
+ * ```
+ *
+ * A rule is a preset (`snake_case`, `camelCase`, `PascalCase`) or a regular
+ * expression the whole name must match. Only the names a migration adds are
+ * checked: a table, column, index or named constraint in its recorded schema
+ * that its parent's does not have. A name already there is not reported
+ * again, so turning a rule on does not fail the migrations already written.
+ * An unnamed constraint (the server names it) is not checked.
+ *
+ * Read from the recorded schemas with the lexicon's own parser: the names
+ * are the server's (Postgres folds an unquoted name to lower case). Each
+ * finding is at the migration's first step on the object, so a
+ * `-- yodel:allow naming <reason>` line above it silences it.
+ */
+import { schemaFromBuildOutput } from "@intentius/chant-lexicon-sql/clickhouse/plan/schema";
+import { pgSchemaFromBuildOutput } from "@intentius/chant-lexicon-sql/postgres/plan/schema";
+import { YodelError } from "../project.js";
+export const NAMING_KINDS = ["table", "column", "index", "constraint"];
+export const NAMING_PRESETS = {
+    snake_case: "[a-z][a-z0-9]*(_[a-z0-9]+)*",
+    camelCase: "[a-z][a-zA-Z0-9]*",
+    PascalCase: "[A-Z][a-zA-Z0-9]*",
+};
+const isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/** Reads `lint.naming`; a key that is not a kind, or a rule that is not a preset or a valid expression, is an error naming `where`. */
+export function namingSettings(raw, where = "yodel.config.ts") {
+    if (raw === undefined)
+        return {};
+    if (!isRecord(raw))
+        throw new YodelError(`${where}: lint.naming: expected an object of ${NAMING_KINDS.join(", ")}: a preset (${Object.keys(NAMING_PRESETS).join(", ")}) or a regular expression`);
+    const out = {};
+    for (const [kind, rule] of Object.entries(raw)) {
+        if (!NAMING_KINDS.includes(kind))
+            throw new YodelError(`${where}: lint.naming.${kind}: not a kind of object (the kinds: ${NAMING_KINDS.join(", ")})`);
+        if (typeof rule !== "string" || rule === "")
+            throw new YodelError(`${where}: lint.naming.${kind}: expected a preset (${Object.keys(NAMING_PRESETS).join(", ")}) or a regular expression`);
+        const source = NAMING_PRESETS[rule] ?? rule;
+        let pattern;
+        try {
+            pattern = new RegExp(`^(?:${source})$`, "u");
+        }
+        catch (e) {
+            throw new YodelError(`${where}: lint.naming.${kind}: ${JSON.stringify(rule)} is not a preset or a valid regular expression: ${e instanceof Error ? e.message : String(e)}`);
+        }
+        out[kind] = { rule, pattern };
+    }
+    return out;
+}
+/** The names of a recorded schema, by kind; `[]` for one the lexicon cannot read (lint reports that on its own). */
+export function schemaNames(build, options = {}) {
+    if (!Array.isArray(build.objects))
+        return [];
+    const out = [];
+    try {
+        if (build.dialect === "postgres") {
+            for (const o of pgSchemaFromBuildOutput(JSON.stringify(build), options.defaultSchema ?? "public")) {
+                const c = o.canonical;
+                const qualified = c.schema ? `${c.schema}.${c.name}` : c.name;
+                const exp = c.exportName ?? o.key;
+                if (c.kind === "table") {
+                    out.push({ kind: "table", key: qualified, name: c.name, export: exp, label: `table ${qualified}` });
+                    for (const col of c.columns)
+                        out.push({ kind: "column", key: `${qualified}.${col.name}`, name: col.name, export: exp, label: `column ${col.name} of ${qualified}` });
+                    for (const k of c.constraints)
+                        if (k.name)
+                            out.push({ kind: "constraint", key: `${qualified}.${k.name}`, name: k.name, export: exp, label: `constraint ${k.name} on ${qualified}` });
+                }
+                else if (c.kind === "index") {
+                    out.push({ kind: "index", key: qualified, name: c.name, export: exp, label: `index ${qualified}` });
+                }
+            }
+        }
+        else {
+            for (const o of schemaFromBuildOutput(JSON.stringify(build), options.defaultDatabase ?? "default")) {
+                const c = o.canonical;
+                if (c.kind !== "table")
+                    continue;
+                const qualified = c.database ? `${c.database}.${c.name}` : c.name;
+                out.push({ kind: "table", key: qualified, name: c.name, export: o.key, label: `table ${qualified}` });
+                for (const col of c.columns)
+                    out.push({ kind: "column", key: `${qualified}.${col.name}`, name: col.name, export: o.key, label: `column ${col.name} of ${qualified}` });
+                for (const name of Object.keys(c.indexes))
+                    out.push({ kind: "index", key: `${qualified}.${name}`, name, export: o.key, label: `index ${name} on ${qualified}` });
+                for (const name of Object.keys(c.constraints))
+                    out.push({ kind: "constraint", key: `${qualified}.${name}`, name, export: o.key, label: `constraint ${name} on ${qualified}` });
+            }
+        }
+    }
+    catch {
+        return [];
+    }
+    return out;
+}
+const PLURAL = { table: "tables", column: "columns", index: "indexes", constraint: "constraints" };
+/** The names each migration adds that break `settings`. */
+export function namingFindings(migrations, settings) {
+    if (Object.keys(settings).length === 0)
+        return [];
+    const byId = new Map(migrations.map((m) => [m.id, m]));
+    const cache = new Map();
+    const names = (m) => {
+        let n = cache.get(m.id);
+        if (!n) {
+            n = schemaNames(m.document.schema, { defaultDatabase: m.document.defaultDatabase, defaultSchema: m.document.defaultSchema });
+            cache.set(m.id, n);
+        }
+        return n;
+    };
+    const out = [];
+    for (const m of migrations) {
+        const parent = m.parent === null ? undefined : byId.get(m.parent);
+        const had = new Set((parent ? names(parent) : []).map((n) => `${n.kind}\u0000${n.key}`));
+        for (const n of names(m)) {
+            const rule = settings[n.kind];
+            if (!rule || had.has(`${n.kind}\u0000${n.key}`) || rule.pattern.test(n.name))
+                continue;
+            const step = m.document.steps.findIndex((s) => s.object === n.export);
+            const at = step >= 0 ? m.document.steps[step] : undefined;
+            out.push({
+                rule: "naming",
+                migration: m.id,
+                message: `${step >= 0 ? `step ${String(step)}: ` : ""}${n.label}: ${JSON.stringify(n.name)} does not match the naming rule for ${PLURAL[n.kind]} (${NAMING_PRESETS[rule.rule] ? `${rule.rule}, ` : ""}${NAMING_PRESETS[rule.rule] ?? rule.rule})`,
+                ...(step >= 0 ? { step } : {}),
+                ...(at ? { object: at.name } : {}),
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=naming.js.map

package/dist/lint/naming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../../src/lint/naming.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,qDAAqD,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AAE5F,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAU,CAAC;AAGhF,MAAM,CAAC,MAAM,cAAc,GAAqC;IAC9D,UAAU,EAAE,6BAA6B;IACzC,SAAS,EAAE,mBAAmB;IAC9B,UAAU,EAAE,mBAAmB;CAChC,CAAC;AAWF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAExH,uIAAuI;AACvI,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,KAAK,GAAG,iBAAiB;IACpE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,wCAAwC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAClM,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,iBAAiB,IAAI,sCAAsC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7K,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,iBAAiB,IAAI,wBAAwB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1L,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC5C,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,MAAM,CAAC,OAAO,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,iBAAiB,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mDAAmD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9K,CAAC;QACD,GAAG,CAAC,IAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD,oHAAoH;AACpH,MAAM,UAAU,WAAW,CAAC,KAAkB,EAAE,UAAwF,EAAE;IACxI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC,EAAE,CAAC;gBAClG,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;gBACtB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;gBAClC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,CAAC;oBACpG,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO;wBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,IAAI,OAAO,SAAS,EAAE,EAAE,CAAC,CAAC;oBACrK,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW;wBAAE,IAAI,CAAC,CAAC,IAAI;4BAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,IAAI,OAAO,SAAS,EAAE,EAAE,CAAC,CAAC;gBACvL,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,CAAC;gBACtG,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,EAAE,CAAC;gBACnG,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;oBAAE,SAAS;gBACjC,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAClE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,EAAE,CAAC,CAAC;gBACtG,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,IAAI,OAAO,SAAS,EAAE,EAAE,CAAC,CAAC;gBACvK,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,IAAI,OAAO,SAAS,EAAE,EAAE,CAAC,CAAC;gBACjK,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,IAAI,OAAO,SAAS,EAAE,EAAE,CAAC,CAAC;YACjL,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD,MAAM,MAAM,GAA+B,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AAE/H,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAAC,UAAgC,EAAE,QAAwB;IACvF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmB,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,CAAY,EAAW,EAAE;QACtC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YAC7H,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvF,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACtE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,CAAC,CAAC,EAAE;gBACf,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,uCAAuC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG;gBACjP,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lint/rules.d.ts

@@ -9,12 +9,18 @@
  *   config lowers them and nothing silences them, because a migration that
  *   breaks one cannot be applied safely or cannot be checked at all.
  * - Statement rules, from the classes chant's classifier gives each step:
- *   `destructive`, `pg-rewrite`, `pg-lock`, `pg-signature`, `ch-mutation`,
- *   `ch-rebuild`.
+ *   `destructive`, `pg-rewrite`, `pg-lock`, `pg-signature`, `pg-access`,
+ *   `pg-rls-not-forced` (a warning), `ch-mutation`, `ch-rebuild`,
+ *   `ch-access`, `data-dependent` (a warning: a statement that can fail
+ *   on the rows already there, with the pre-check yodel apply runs first),
+ *   and `naming` (the names a migration adds, against `lint.naming`).
  *   Errors by default; a line `-- yodel:allow <rule> <reason>` above the
  *   statement in `migration.sql` silences one for that statement, and the
  *   reason is recorded in the history when the migration applies.
  *
+ * The lexicon's schema checks (`SQLPG101`, `SQLCH113`, ...) are rules too,
+ * in `./schema-checks.ts`: silenceable, at the level the check gives.
+ *
  * The rest (`refused-step`, `pg-routine-in-use`, `migration-sql`,
  * `silence`) say a migration will not apply as written or a silence is
  * wrong. Their level can be
@@ -33,6 +39,8 @@ export interface LintRule {
     configurable: boolean;
     /** The dialect it applies to; both when absent. */
     dialect?: "clickhouse" | "postgres";
+    /** One of the sql lexicon's schema checks (`./schema-checks.ts`). */
+    schema?: boolean;
 }
 export declare const LINT_RULES: {
     readonly fork: LintRule;
@@ -52,8 +60,33 @@ export declare const LINT_RULES: {
         readonly configurable: true;
         readonly dialect: "postgres";
     };
+    readonly "pg-access": LintRule;
+    readonly "pg-rls-not-forced": {
+        readonly id: "pg-rls-not-forced";
+        readonly summary: "Postgres: a table's row-level security is enabled but not forced, so the table's owner (often the role that applies) bypasses its policies";
+        readonly level: "warning";
+        readonly silenceable: true;
+        readonly configurable: true;
+        readonly dialect: "postgres";
+    };
+    readonly "data-dependent": {
+        readonly id: "data-dependent";
+        readonly summary: "Postgres: a statement that can fail on the rows already there (a unique index over duplicates, SET NOT NULL over NULLs, a check or foreign key some row breaks); yodel apply runs its pre-check first and refuses when it counts any";
+        readonly level: "warning";
+        readonly silenceable: true;
+        readonly configurable: true;
+        readonly dialect: "postgres";
+    };
+    readonly naming: {
+        readonly id: "naming";
+        readonly summary: "a table, column, index or constraint the migration adds breaks yodel.config.ts lint.naming";
+        readonly level: "error";
+        readonly silenceable: true;
+        readonly configurable: true;
+    };
     readonly "ch-mutation": LintRule;
     readonly "ch-rebuild": LintRule;
+    readonly "ch-access": LintRule;
     readonly "refused-step": LintRule;
     readonly "migration-sql": LintRule;
     readonly silence: LintRule;
@@ -61,5 +94,5 @@ export declare const LINT_RULES: {
 export type LintRuleId = keyof typeof LINT_RULES;
 export declare const ruleIds: LintRuleId[];
 export declare const isRuleId: (id: string) => id is LintRuleId;
-/** The rules a `-- yodel:allow` line can name. */
-export declare const silenceableRules: () => LintRuleId[];
+/** The rules a `-- yodel:allow` line can name: the statement rules, and the lexicon's schema checks. */
+export declare const silenceableRules: () => string[];

package/dist/lint/rules.js

@@ -9,17 +9,24 @@
  *   config lowers them and nothing silences them, because a migration that
  *   breaks one cannot be applied safely or cannot be checked at all.
  * - Statement rules, from the classes chant's classifier gives each step:
- *   `destructive`, `pg-rewrite`, `pg-lock`, `pg-signature`, `ch-mutation`,
- *   `ch-rebuild`.
+ *   `destructive`, `pg-rewrite`, `pg-lock`, `pg-signature`, `pg-access`,
+ *   `pg-rls-not-forced` (a warning), `ch-mutation`, `ch-rebuild`,
+ *   `ch-access`, `data-dependent` (a warning: a statement that can fail
+ *   on the rows already there, with the pre-check yodel apply runs first),
+ *   and `naming` (the names a migration adds, against `lint.naming`).
  *   Errors by default; a line `-- yodel:allow <rule> <reason>` above the
  *   statement in `migration.sql` silences one for that statement, and the
  *   reason is recorded in the history when the migration applies.
  *
+ * The lexicon's schema checks (`SQLPG101`, `SQLCH113`, ...) are rules too,
+ * in `./schema-checks.ts`: silenceable, at the level the check gives.
+ *
  * The rest (`refused-step`, `pg-routine-in-use`, `migration-sql`,
  * `silence`) say a migration will not apply as written or a silence is
  * wrong. Their level can be
  * changed in `yodel.config.ts`, but they cannot be silenced.
  */
+import { SCHEMA_RULES } from "./schema-checks.js";
 const integrity = (id, summary) => ({ id, summary, level: "error", silenceable: false, configurable: false });
 const statement = (id, summary, dialect) => ({ id, summary, level: "error", silenceable: true, configurable: true, ...(dialect ? { dialect } : {}) });
 const shape = (id, summary, level = "error") => ({ id, summary, level, silenceable: false, configurable: true });
@@ -34,14 +41,19 @@ export const LINT_RULES = {
     "pg-lock": statement("pg-lock", "Postgres: holds a lock that blocks writes for a whole scan or index build (an index without CONCURRENTLY, a constraint validated in place)", "postgres"),
     "pg-signature": statement("pg-signature", "Postgres: a function or procedure dropped and created with another signature or result; a caller written for the old one fails", "postgres"),
     "pg-routine-in-use": { id: "pg-routine-in-use", summary: "Postgres: a function dropped while a trigger the migration's schema declares still executes it; the DROP fails", level: "error", silenceable: false, configurable: true, dialect: "postgres" },
+    "pg-access": statement("pg-access", "Postgres: takes access away: a privilege revoked, a policy dropped, or row-level security turned off or no longer forced on the table's owner", "postgres"),
+    "pg-rls-not-forced": { id: "pg-rls-not-forced", summary: "Postgres: a table's row-level security is enabled but not forced, so the table's owner (often the role that applies) bypasses its policies", level: "warning", silenceable: true, configurable: true, dialect: "postgres" },
+    "data-dependent": { id: "data-dependent", summary: "Postgres: a statement that can fail on the rows already there (a unique index over duplicates, SET NOT NULL over NULLs, a check or foreign key some row breaks); yodel apply runs its pre-check first and refuses when it counts any", level: "warning", silenceable: true, configurable: true, dialect: "postgres" },
+    naming: { id: "naming", summary: "a table, column, index or constraint the migration adds breaks yodel.config.ts lint.naming", level: "error", silenceable: true, configurable: true },
     "ch-mutation": statement("ch-mutation", "ClickHouse: starts a mutation that rewrites existing parts in the background, with no rollback", "clickhouse"),
     "ch-rebuild": statement("ch-rebuild", "ClickHouse: a rebuild, every row copied into a new table and swapped in (ClickHouseRebuildOp)", "clickhouse"),
+    "ch-access": statement("ch-access", "ClickHouse: takes access away: a privilege or role revoked from a user or role (SQLCH274)", "clickhouse"),
     "refused-step": shape("refused-step", "a step yodel apply refuses to run: a manual step, or an Op step it does not run"),
     "migration-sql": shape("migration-sql", "migration.sql does not hold a statement as migration.json records it; apply runs migration.json's"),
     silence: shape("silence", "a yodel:allow line that is malformed, names a rule no statement can silence, has no reason, or silences nothing"),
 };
 export const ruleIds = Object.keys(LINT_RULES);
 export const isRuleId = (id) => Object.hasOwn(LINT_RULES, id);
-/** The rules a `-- yodel:allow` line can name. */
-export const silenceableRules = () => ruleIds.filter((id) => LINT_RULES[id].silenceable);
+/** The rules a `-- yodel:allow` line can name: the statement rules, and the lexicon's schema checks. */
+export const silenceableRules = () => [...ruleIds.filter((id) => LINT_RULES[id].silenceable), ...Object.keys(SCHEMA_RULES)];
 //# sourceMappingURL=rules.js.map

package/dist/lint/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/lint/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,OAAe,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;AACxI,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,OAA6B,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACtM,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,QAAmB,OAAO,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAEtJ,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,iFAAiF,CAAC;IAC1G,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,oHAAoH,CAAC;IACvJ,QAAQ,EAAE,SAAS,CAAC,UAAU,EAAE,wHAAwH,CAAC;IACzJ,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE,mGAAmG,CAAC;IACxJ,UAAU,EAAE,SAAS,CAAC,YAAY,EAAE,wIAAwI,CAAC;IAC7K,WAAW,EAAE,SAAS,CAAC,aAAa,EAAE,uFAAuF,CAAC;IAC9H,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,6GAA6G,EAAE,UAAU,CAAC;IAChK,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,4IAA4I,EAAE,UAAU,CAAC;IACzL,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,gIAAgI,EAAE,UAAU,CAAC;IACvL,mBAAmB,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,gHAAgH,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;IACxP,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,gGAAgG,EAAE,YAAY,CAAC;IACvJ,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,+FAA+F,EAAE,YAAY,CAAC;IACpJ,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,iFAAiF,CAAC;IACxH,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,mGAAmG,CAAC;IAC5I,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,iHAAiH,CAAC;CACjG,CAAC;AAI9C,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAiB,CAAC;AAE/D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAoB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAExF,kDAAkD;AAClD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/lint/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAoBlD,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,OAAe,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;AACxI,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,OAA6B,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACtM,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,QAAmB,OAAO,EAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAEtJ,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,iFAAiF,CAAC;IAC1G,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,oHAAoH,CAAC;IACvJ,QAAQ,EAAE,SAAS,CAAC,UAAU,EAAE,wHAAwH,CAAC;IACzJ,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE,mGAAmG,CAAC;IACxJ,UAAU,EAAE,SAAS,CAAC,YAAY,EAAE,wIAAwI,CAAC;IAC7K,WAAW,EAAE,SAAS,CAAC,aAAa,EAAE,uFAAuF,CAAC;IAC9H,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,6GAA6G,EAAE,UAAU,CAAC;IAChK,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,4IAA4I,EAAE,UAAU,CAAC;IACzL,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,gIAAgI,EAAE,UAAU,CAAC;IACvL,mBAAmB,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,gHAAgH,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;IACxP,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,+IAA+I,EAAE,UAAU,CAAC;IAChM,mBAAmB,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,4IAA4I,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;IACrR,gBAAgB,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,sOAAsO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;IACzW,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,4FAA4F,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;IACtL,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,gGAAgG,EAAE,YAAY,CAAC;IACvJ,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,+FAA+F,EAAE,YAAY,CAAC;IACpJ,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,2FAA2F,EAAE,YAAY,CAAC;IAC9I,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,iFAAiF,CAAC;IACxH,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,mGAAmG,CAAC;IAC5I,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,iHAAiH,CAAC;CACjG,CAAC;AAI9C,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAiB,CAAC;AAE/D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAoB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAExF,wGAAwG;AACxG,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAa,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC"}

package/dist/lint/schema-checks.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The sql lexicon's schema checks (#51) inside `yodel lint`: the post-synth
+ * checks `chant lint` runs over a build (a table with no primary key, a
+ * foreign key with no index, a column type to avoid, an engine or setting
+ * the pinned server does not have), run here on each migration's recorded
+ * schema, so a project has one lint command and one configuration.
+ *
+ * A finding is reported in the migration whose recorded schema first has
+ * it: the parent's schema is checked too, and what it already had is not
+ * reported again. It is put at the migration's first step on the object it
+ * names, so a `-- yodel:allow <id> <reason>` line above that step silences
+ * it, as for a statement rule.
+ *
+ * Levels: each check's rule id (`SQLPG101`, `SQLCH113`) is a lint rule.
+ * `yodel.config.ts` `lint.rules` sets it first; else `chant.config.ts`
+ * `lint.rules`, which `chant lint` reads; else the level the check gives
+ * the finding (an `info` finding is a warning here).
+ *
+ * The checks read the objects as `chant build` serializes them (their
+ * columns, keys and engine besides the DDL); an object recorded with its
+ * DDL only is not checked.
+ */
+import type { BuildOutput } from "../chant/build.js";
+import type { Migration } from "../migrations/index.js";
+import type { LevelSetting, LintLevel, LintRule } from "./rules.js";
+export type Dialect = "clickhouse" | "postgres";
+/** Every schema check the lexicon ships, as a lint rule: silenceable, its level set in config. */
+export declare const SCHEMA_RULES: Readonly<Record<string, LintRule>>;
+export declare const isSchemaRule: (id: string) => boolean;
+/** One schema check's finding in a recorded schema. */
+export interface SchemaDiagnostic {
+    rule: string;
+    /** The level the check gave it. */
+    level: LintLevel;
+    message: string;
+    /** The export it names, when it names one. */
+    entity?: string;
+}
+/** Runs every schema check over one recorded schema. A check that throws is reported as a finding of its own. */
+export declare function schemaDiagnostics(schema: BuildOutput): SchemaDiagnostic[];
+/** A level from `chant.config.ts` `lint.rules`: a severity string, or `[severity, options]`. */
+export declare function chantLevel(value: unknown): LevelSetting | undefined;
+/** A schema finding before its silence is applied: where it is, and its level unless `yodel.config.ts` sets the rule's. */
+export interface SchemaFinding {
+    rule: string;
+    migration: string;
+    message: string;
+    step?: number;
+    object?: string;
+    /** Undefined when `yodel.config.ts` sets the rule's level, which then applies. */
+    level?: LintLevel;
+}
+/**
+ * The schema findings of every migration: each check's findings on its
+ * recorded schema that its parent's recorded schema does not have.
+ * `configured` are the rule ids `yodel.config.ts` sets; `chantRules` is
+ * `chant.config.ts`'s `lint.rules`.
+ */
+export declare function schemaFindings(migrations: readonly Migration[], options: {
+    dialect?: Dialect | undefined;
+    configured: ReadonlySet<string>;
+    chantRules?: Record<string, unknown> | undefined;
+}): SchemaFinding[];

package/dist/lint/schema-checks.js

@@ -0,0 +1,128 @@
+/**
+ * The sql lexicon's schema checks (#51) inside `yodel lint`: the post-synth
+ * checks `chant lint` runs over a build (a table with no primary key, a
+ * foreign key with no index, a column type to avoid, an engine or setting
+ * the pinned server does not have), run here on each migration's recorded
+ * schema, so a project has one lint command and one configuration.
+ *
+ * A finding is reported in the migration whose recorded schema first has
+ * it: the parent's schema is checked too, and what it already had is not
+ * reported again. It is put at the migration's first step on the object it
+ * names, so a `-- yodel:allow <id> <reason>` line above that step silences
+ * it, as for a statement rule.
+ *
+ * Levels: each check's rule id (`SQLPG101`, `SQLCH113`) is a lint rule.
+ * `yodel.config.ts` `lint.rules` sets it first; else `chant.config.ts`
+ * `lint.rules`, which `chant lint` reads; else the level the check gives
+ * the finding (an `info` finding is a warning here).
+ *
+ * The checks read the objects as `chant build` serializes them (their
+ * columns, keys and engine besides the DDL); an object recorded with its
+ * DDL only is not checked.
+ */
+import { postSynthChecks } from "@intentius/chant-lexicon-sql/lint/post-synth";
+const dialectOf = (id) => (id.startsWith("SQLCH") ? "clickhouse" : id.startsWith("SQLPG") ? "postgres" : undefined);
+/** Every schema check the lexicon ships, as a lint rule: silenceable, its level set in config. */
+export const SCHEMA_RULES = Object.fromEntries(postSynthChecks.map((c) => {
+    const dialect = dialectOf(c.id);
+    return [c.id, { id: c.id, summary: `schema check: ${c.description}`, level: "warning", silenceable: true, configurable: true, schema: true, ...(dialect ? { dialect } : {}) }];
+}));
+export const isSchemaRule = (id) => Object.hasOwn(SCHEMA_RULES, id);
+/** Objects as `chant build` writes them carry their name besides the DDL; one with the DDL alone is left out. */
+const serialized = (o) => typeof o.name === "string";
+/** Runs every schema check over one recorded schema. A check that throws is reported as a finding of its own. */
+export function schemaDiagnostics(schema) {
+    if (!Array.isArray(schema.objects))
+        return [];
+    const value = { ...schema, objects: schema.objects.filter(serialized) };
+    if (value.objects.length === 0)
+        return [];
+    const outputs = new Map([["sql", JSON.stringify(value)]]);
+    const ctx = {
+        outputs,
+        entities: new Map(),
+        docs: [{ lexicon: "sql", index: 0, format: "json", value }],
+        buildResult: { outputs, entities: new Map(), warnings: [], errors: [], sourceFileCount: 0 },
+    };
+    const out = [];
+    for (const check of postSynthChecks) {
+        const dialect = dialectOf(check.id);
+        if (dialect !== undefined && dialect !== schema.dialect)
+            continue;
+        let found;
+        try {
+            found = check.check(ctx);
+        }
+        catch (e) {
+            out.push({ rule: check.id, level: "error", message: `${check.id} could not run on the recorded schema: ${(e instanceof Error ? e.message : String(e)).split("\n")[0] ?? ""}` });
+            continue;
+        }
+        for (const d of found) {
+            out.push({ rule: d.checkId, level: d.severity === "error" ? "error" : "warning", message: d.message, ...(d.entity !== undefined ? { entity: d.entity } : {}) });
+        }
+    }
+    return out;
+}
+/** A level from `chant.config.ts` `lint.rules`: a severity string, or `[severity, options]`. */
+export function chantLevel(value) {
+    const s = Array.isArray(value) ? value[0] : value;
+    if (s === "off")
+        return "off";
+    if (s === "error")
+        return "error";
+    if (s === "warning" || s === "info")
+        return "warning";
+    return undefined;
+}
+const keyOf = (d) => `${d.rule}\u0000${d.entity ?? ""}\u0000${d.message}`;
+/**
+ * The schema findings of every migration: each check's findings on its
+ * recorded schema that its parent's recorded schema does not have.
+ * `configured` are the rule ids `yodel.config.ts` sets; `chantRules` is
+ * `chant.config.ts`'s `lint.rules`.
+ */
+export function schemaFindings(migrations, options) {
+    const byId = new Map(migrations.map((m) => [m.id, m]));
+    const cache = new Map();
+    const diagnostics = (m) => {
+        let d = cache.get(m.id);
+        if (!d) {
+            const schema = m.document.schema;
+            d = schema.dialect === "clickhouse" || schema.dialect === "postgres" ? schemaDiagnostics(schema) : [];
+            cache.set(m.id, d);
+        }
+        return d;
+    };
+    const out = [];
+    for (const m of migrations) {
+        const d = m.document.dialect;
+        if (d !== "clickhouse" && d !== "postgres")
+            continue;
+        if (options.dialect !== undefined && d !== options.dialect)
+            continue;
+        const parent = m.parent === null ? undefined : byId.get(m.parent);
+        const before = new Set((parent ? diagnostics(parent) : []).map(keyOf));
+        for (const diag of diagnostics(m)) {
+            if (before.has(keyOf(diag)))
+                continue;
+            let level;
+            if (!options.configured.has(diag.rule)) {
+                const set = chantLevel(options.chantRules?.[diag.rule]);
+                if (set === "off")
+                    continue;
+                level = set ?? diag.level;
+            }
+            const step = diag.entity === undefined ? -1 : m.document.steps.findIndex((s) => s.object === diag.entity);
+            out.push({
+                rule: diag.rule,
+                migration: m.id,
+                message: `${step >= 0 ? `step ${String(step)}: ` : ""}${diag.message}`,
+                ...(step >= 0 ? { step } : {}),
+                ...(step >= 0 ? { object: m.document.steps[step]?.name ?? diag.entity } : diag.entity !== undefined ? { object: diag.entity } : {}),
+                ...(level !== undefined ? { level } : {}),
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=schema-checks.js.map

package/dist/lint/schema-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-checks.js","sourceRoot":"","sources":["../../src/lint/schema-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,8CAA8C,CAAC;AAO/E,MAAM,SAAS,GAAG,CAAC,EAAU,EAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEjJ,kGAAkG;AAClG,MAAM,CAAC,MAAM,YAAY,GAAuC,MAAM,CAAC,WAAW,CAChF,eAAe,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAqB,CAAC,CAAC;AACpM,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAYrF,iHAAiH;AACjH,MAAM,UAAU,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CAAC;AAE/F,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;IACxE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAqB;QAC5B,OAAO;QACP,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3D,WAAW,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE;KAC5F,CAAC;IACF,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO;YAAE,SAAS;QAClE,IAAI,KAA4B,CAAC;QACjC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,EAAE,0CAA0C,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAChL,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClK,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAa,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAClC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AAaD,MAAM,KAAK,GAAG,CAAC,CAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,MAAM,IAAI,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,UAAgC,EAAE,OAA6H;IAC5L,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,MAAM,WAAW,GAAG,CAAC,CAAY,EAAsB,EAAE;QACvD,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjC,CAAC,GAAI,MAAM,CAAC,OAAmB,KAAK,YAAY,IAAK,MAAM,CAAC,OAAmB,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAkB,CAAC;QACxC,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,UAAU;YAAE,SAAS;QACrD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO,CAAC,OAAO;YAAE,SAAS;QACrE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACtC,IAAI,KAA4B,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,IAAI,GAAG,KAAK,KAAK;oBAAE,SAAS;gBAC5B,KAAK,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC;YAC5B,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1G,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,CAAC,CAAC,EAAE;gBACf,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;gBACtE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lint/statements.d.ts

@@ -5,9 +5,18 @@
  *
  * - `destructive`: a statement marked destructive (a table or column drop),
  *   or an Op step one of whose changes is.
+ * - `pg-access`: a Postgres statement that takes access away (#45): a
+ *   privilege revoked (SQLPG297), a policy dropped (SQLPG292), row-level
+ *   security turned off or no longer forced (SQLPG293). A revoke on an
+ *   object the same migration creates (`REVOKE EXECUTE ... FROM PUBLIC` on
+ *   a new function) takes nothing from anyone and is left out.
  * - `ch-mutation`: a ClickHouse statement of class `rewrite`, or one that
  *   waits for its mutation (a column type or TTL change).
  * - `ch-rebuild`: a `ClickHouseRebuildOp` step.
+ * - `ch-access`: a ClickHouse statement that takes access away (#46): a
+ *   privilege or role revoked (SQLCH274). ClickHouse takes no `REVOKE`
+ *   declaration, so each one revokes what a grantee holds and no
+ *   declaration grants any more.
  * - `pg-rewrite`: a Postgres statement of class `rewrite` (ACCESS EXCLUSIVE
  *   for a rewrite or a full scan).
  * - `pg-lock`: a Postgres statement that blocks writes for a whole build or
@@ -17,6 +26,12 @@
  *   foreign key or domain constraint validated in place rather than added
  *   `NOT VALID` (SQLPG219, SQLPG262).
  *
+ * - `data-dependent`: a Postgres statement chant marks as able to fail on
+ *   the rows already there (its `precheck`: a unique index over
+ *   duplicates, SET NOT NULL over NULLs, a check or foreign key a row
+ *   breaks). The finding shows the pre-check, which yodel apply runs before
+ *   the migration's first statement and refuses on when it is not 0.
+ *
  * `COMMENT ON` statements are skipped: chant writes one after a `CREATE`
  * with the same rule, and a comment is catalog only.
  *
@@ -32,7 +47,13 @@ export interface StepFinding {
 }
 /** What lint cannot read in a step, or `undefined`. */
 export declare function unreadableStep(dialect: Dialect, step: MigrationStep): string | undefined;
+/** What a step is read with: the names of the objects its migration creates (`schema.table`, `schema.fn(args)`), from {@link createdObjects}. */
+export interface StepContext {
+    created?: ReadonlySet<string>;
+}
+/** The objects a migration's statements create, by the name each step carries. */
+export declare function createdObjects(steps: readonly MigrationStep[]): Set<string>;
 /** The statement-rule findings for one step, before levels and silences. */
-export declare function stepFindings(dialect: Dialect, step: MigrationStep): StepFinding[];
+export declare function stepFindings(dialect: Dialect, step: MigrationStep, context?: StepContext): StepFinding[];
 /** Why yodel apply refuses a step, or `undefined` for one it runs. */
 export declare function refusedStep(step: MigrationStep): string | undefined;