@postgres-language-server/cli-aarch64-apple-darwin 0.17.2 → 0.19.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postgres-language-server/cli-aarch64-apple-darwin",
-  "version": "0.17.2",
+  "version": "0.19.0",
   "license": "MIT or Apache-2.0",
   "repository": {
     "type": "git",

package/schema.json

@@ -77,6 +77,17 @@
         }
       ]
     },
+    "splinter": {
+      "description": "The configuration for splinter",
+      "anyOf": [
+        {
+          "$ref": "#/definitions/SplinterConfiguration"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
     "typecheck": {
       "description": "The configuration for type checking",
       "anyOf": [
@@ -221,7 +232,7 @@
           ]
         },
         "ignore": {
-          "description": "A list of Unix shell style patterns. The formatter will ignore files/folders that will match these patterns.",
+          "description": "A list of Unix shell style patterns. The linter will ignore files/folders that will match these patterns.",
           "anyOf": [
             {
               "$ref": "#/definitions/StringSet"
@@ -232,7 +243,7 @@
           ]
         },
         "include": {
-          "description": "A list of Unix shell style patterns. The formatter will include files/folders that will match these patterns.",
+          "description": "A list of Unix shell style patterns. The linter will include files/folders that will match these patterns.",
           "anyOf": [
             {
               "$ref": "#/definitions/StringSet"
@@ -246,7 +257,37 @@
           "description": "List of rules",
           "anyOf": [
             {
-              "$ref": "#/definitions/Rules"
+              "$ref": "#/definitions/LinterRules"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "LinterRules": {
+      "type": "object",
+      "properties": {
+        "all": {
+          "description": "It enables ALL rules. The rules that belong to `nursery` won't be enabled.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "recommended": {
+          "description": "It enables the lint rules recommended by Postgres Language Server. `true` by default.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "safety": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/Safety"
             },
             {
               "type": "null"
@@ -279,6 +320,104 @@
       },
       "additionalProperties": false
     },
+    "Performance": {
+      "description": "A list of rules that belong to this group",
+      "type": "object",
+      "properties": {
+        "all": {
+          "description": "It enables ALL rules for this group.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "authRlsInitplan": {
+          "description": "Auth RLS Initialization Plan: Detects if calls to `current_setting()` and `auth.()` in RLS policies are being unnecessarily re-evaluated for each row",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "duplicateIndex": {
+          "description": "Duplicate Index: Detects cases where two ore more identical indexes exist.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "multiplePermissivePolicies": {
+          "description": "Multiple Permissive Policies: Detects if multiple permissive row level security policies are present on a table for the same `role` and `action` (e.g. insert). Multiple permissive policies are suboptimal for performance as each policy must be executed for every relevant query.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "noPrimaryKey": {
+          "description": "No Primary Key: Detects if a table does not have a primary key. Tables without a primary key can be inefficient to interact with at scale.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "recommended": {
+          "description": "It enables the recommended rules for this group",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "tableBloat": {
+          "description": "Table Bloat: Detects if a table has excess bloat and may benefit from maintenance operations like vacuum full or cluster.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "unindexedForeignKeys": {
+          "description": "Unindexed foreign keys: Identifies foreign key constraints without a covering index, which can impact database performance.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "unusedIndex": {
+          "description": "Unused Index: Detects if an index has never been used and may be a candidate for removal.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
     "PlPgSqlCheckConfiguration": {
       "description": "The configuration for type checking.",
       "type": "object",
@@ -329,30 +468,26 @@
       },
       "additionalProperties": false
     },
-    "Rules": {
+    "RuleWithSplinterRuleOptions": {
       "type": "object",
+      "required": [
+        "level",
+        "options"
+      ],
       "properties": {
-        "all": {
-          "description": "It enables ALL rules. The rules that belong to `nursery` won't be enabled.",
-          "type": [
-            "boolean",
-            "null"
-          ]
-        },
-        "recommended": {
-          "description": "It enables the lint rules recommended by Postgres Language Server. `true` by default.",
-          "type": [
-            "boolean",
-            "null"
+        "level": {
+          "description": "The severity of the emitted diagnostics by the rule",
+          "allOf": [
+            {
+              "$ref": "#/definitions/RulePlainConfiguration"
+            }
           ]
         },
-        "safety": {
-          "anyOf": [
-            {
-              "$ref": "#/definitions/Safety"
-            },
+        "options": {
+          "description": "Rule's options",
+          "allOf": [
             {
-              "type": "null"
+              "$ref": "#/definitions/SplinterRuleOptions"
             }
           ]
         }
@@ -743,6 +878,270 @@
       },
       "additionalProperties": false
     },
+    "Security": {
+      "description": "A list of rules that belong to this group",
+      "type": "object",
+      "properties": {
+        "all": {
+          "description": "It enables ALL rules for this group.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "authUsersExposed": {
+          "description": "Exposed Auth Users: Detects if auth.users is exposed to anon or authenticated roles via a view or materialized view in schemas exposed to PostgREST, potentially compromising user data security.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "extensionInPublic": {
+          "description": "Extension in Public: Detects extensions installed in the `public` schema.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "extensionVersionsOutdated": {
+          "description": "Extension Versions Outdated: Detects extensions that are not using the default (recommended) version.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "fkeyToAuthUnique": {
+          "description": "Foreign Key to Auth Unique Constraint: Detects user defined foreign keys to unique constraints in the auth schema.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "foreignTableInApi": {
+          "description": "Foreign Table in API: Detects foreign tables that are accessible over APIs. Foreign tables do not respect row level security policies.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "functionSearchPathMutable": {
+          "description": "Function Search Path Mutable: Detects functions where the search_path parameter is not set.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "insecureQueueExposedInApi": {
+          "description": "Insecure Queue Exposed in API: Detects cases where an insecure Queue is exposed over Data APIs",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "materializedViewInApi": {
+          "description": "Materialized View in API: Detects materialized views that are accessible over the Data APIs.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "policyExistsRlsDisabled": {
+          "description": "Policy Exists RLS Disabled: Detects cases where row level security (RLS) policies have been created, but RLS has not been enabled for the underlying table.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "recommended": {
+          "description": "It enables the recommended rules for this group",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "rlsDisabledInPublic": {
+          "description": "RLS Disabled in Public: Detects cases where row level security (RLS) has not been enabled on tables in schemas exposed to PostgREST",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "rlsEnabledNoPolicy": {
+          "description": "RLS Enabled No Policy: Detects cases where row level security (RLS) has been enabled on a table but no RLS policies have been created.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "rlsReferencesUserMetadata": {
+          "description": "RLS references user metadata: Detects when Supabase Auth user_metadata is referenced insecurely in a row level security (RLS) policy.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "securityDefinerView": {
+          "description": "Security Definer View: Detects views defined with the SECURITY DEFINER property. These views enforce Postgres permissions and row level security policies (RLS) of the view creator, rather than that of the querying user",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "unsupportedRegTypes": {
+          "description": "Unsupported reg types: Identifies columns using unsupported reg* types outside pg_catalog schema, which prevents database upgrades using pg_upgrade.",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRuleConfiguration"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "SplinterConfiguration": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "description": "if `false`, it disables the feature and the linter won't be executed. `true` by default",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "rules": {
+          "description": "List of rules",
+          "anyOf": [
+            {
+              "$ref": "#/definitions/SplinterRules"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "SplinterRuleConfiguration": {
+      "anyOf": [
+        {
+          "$ref": "#/definitions/RulePlainConfiguration"
+        },
+        {
+          "$ref": "#/definitions/RuleWithSplinterRuleOptions"
+        }
+      ]
+    },
+    "SplinterRuleOptions": {
+      "description": "Shared options for all splinter rules.\n\nThese options allow configuring per-rule filtering of database objects.",
+      "type": "object",
+      "properties": {
+        "ignore": {
+          "description": "A list of glob patterns for database objects to ignore.\n\nPatterns use Unix-style globs where: - `*` matches any sequence of characters - `?` matches any single character\n\nEach pattern should be in the format `schema.object_name`, for example: - `\"public.my_table\"` - ignores a specific table - `\"audit.*\"` - ignores all objects in the audit schema - `\"*.audit_*\"` - ignores objects with audit_ prefix in any schema",
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "SplinterRules": {
+      "type": "object",
+      "properties": {
+        "all": {
+          "description": "It enables ALL rules. The rules that belong to `nursery` won't be enabled.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "performance": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/Performance"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "recommended": {
+          "description": "It enables the lint rules recommended by Postgres Language Server. `true` by default.",
+          "type": [
+            "boolean",
+            "null"
+          ]
+        },
+        "security": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/Security"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
     "StringSet": {
       "type": "array",
       "items": {