ddlforge 0.1.0

package/dist/src/rules/indexConcurrently.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ddlforge Rule: CREATE INDEX missing CONCURRENTLY
+ *
+ * Severity: BLOCKER
+ * Lock: SHARE (blocks all INSERT, UPDATE, DELETE)
+ */
+import { Rule } from './types.js';
+export declare const indexConcurrentlyRule: Rule;
+//# sourceMappingURL=indexConcurrently.d.ts.map

package/dist/src/rules/indexConcurrently.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexConcurrently.d.ts","sourceRoot":"","sources":["../../../src/rules/indexConcurrently.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAwB,MAAM,YAAY,CAAC;AAIxD,eAAO,MAAM,qBAAqB,EAAE,IA2FnC,CAAC"}

package/dist/src/rules/indexConcurrently.js

@@ -0,0 +1,92 @@
+/**
+ * ddlforge Rule: CREATE INDEX missing CONCURRENTLY
+ *
+ * Severity: BLOCKER
+ * Lock: SHARE (blocks all INSERT, UPDATE, DELETE)
+ */
+import { PostgresLockLevel } from '../engine/locks.js';
+import { TokenType } from '../lexer/tokens.js';
+export const indexConcurrentlyRule = {
+    id: 'require-concurrent-index',
+    name: 'CREATE INDEX without CONCURRENTLY',
+    description: 'CREATE INDEX acquires a SHARE lock, blocking all concurrent INSERT, UPDATE, and DELETE operations.',
+    defaultSeverity: 'BLOCKER',
+    lockLevel: PostgresLockLevel.SHARE,
+    check(context) {
+        const findings = [];
+        for (const stmt of context.statements) {
+            if (stmt.hasIgnore(this.id))
+                continue;
+            const tokens = stmt.tokens;
+            if (tokens.length < 3)
+                continue;
+            let idx = 0;
+            if (tokens[idx].value !== 'CREATE')
+                continue;
+            idx++;
+            let isUnique = false;
+            if (tokens[idx]?.value === 'UNIQUE') {
+                isUnique = true;
+                idx++;
+            }
+            if (tokens[idx]?.value !== 'INDEX')
+                continue;
+            idx++;
+            // Check if CONCURRENTLY is present before the 'ON' keyword
+            let hasConcurrently = false;
+            let onIndex = -1;
+            let indexName = '';
+            for (let i = idx; i < tokens.length; i++) {
+                if (tokens[i].value === 'CONCURRENTLY') {
+                    hasConcurrently = true;
+                }
+                if (tokens[i].value === 'ON') {
+                    onIndex = i;
+                    break;
+                }
+                if (!hasConcurrently && tokens[i].value !== 'IF' && tokens[i].value !== 'NOT' && tokens[i].value !== 'EXISTS') {
+                    if (!indexName && (tokens[i].type === TokenType.IDENTIFIER || tokens[i].type === TokenType.KEYWORD)) {
+                        indexName = tokens[i].raw;
+                    }
+                }
+            }
+            // If there is no 'ON', it's not a valid standard CREATE INDEX statement
+            if (onIndex === -1)
+                continue;
+            if (!hasConcurrently) {
+                // Find table name after ON
+                let tableName = '';
+                if (onIndex + 1 < tokens.length) {
+                    const tableToken = tokens[onIndex + 1];
+                    if (tableToken.value === 'ONLY' && onIndex + 2 < tokens.length) {
+                        tableName = tokens[onIndex + 2].raw;
+                    }
+                    else {
+                        tableName = tableToken.raw;
+                    }
+                }
+                const prefix = isUnique ? 'CREATE UNIQUE INDEX CONCURRENTLY' : 'CREATE INDEX CONCURRENTLY';
+                const restOfStatement = stmt.raw
+                    .replace(/^CREATE\s+(UNIQUE\s+)?INDEX\s+/i, '')
+                    .trim();
+                const suggestedFix = `${prefix} ${restOfStatement};`;
+                findings.push({
+                    ruleId: this.id,
+                    ruleName: this.name,
+                    severity: this.defaultSeverity,
+                    lockLevel: this.lockLevel,
+                    message: `CREATE ${isUnique ? 'UNIQUE ' : ''}INDEX missing CONCURRENTLY keyword.`,
+                    detail: 'Building an index without CONCURRENTLY acquires a SHARE lock on the target table. ' +
+                        'This blocks all concurrent write operations (INSERT, UPDATE, DELETE) for the entire duration of the build.',
+                    suggestion: `Add the CONCURRENTLY modifier: \`${suggestedFix}\` (Note: Run outside of an explicit transaction).`,
+                    file: context.filePath,
+                    line: stmt.startLine,
+                    column: stmt.startColumn,
+                    codeSnippet: stmt.raw,
+                });
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=indexConcurrently.js.map

package/dist/src/rules/indexConcurrently.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexConcurrently.js","sourceRoot":"","sources":["../../../src/rules/indexConcurrently.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,mCAAmC;IACzC,WAAW,EAAE,oGAAoG;IACjH,eAAe,EAAE,SAAS;IAC1B,SAAS,EAAE,iBAAiB,CAAC,KAAK;IAElC,KAAK,CAAC,OAAoB;QACxB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAEhC,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAC7C,GAAG,EAAE,CAAC;YAEN,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACpC,QAAQ,GAAG,IAAI,CAAC;gBAChB,GAAG,EAAE,CAAC;YACR,CAAC;YAED,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,OAAO;gBAAE,SAAS;YAC7C,GAAG,EAAE,CAAC;YAEN,2DAA2D;YAC3D,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;YACjB,IAAI,SAAS,GAAG,EAAE,CAAC;YAEnB,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;oBACvC,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;gBACD,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC7B,OAAO,GAAG,CAAC,CAAC;oBACZ,MAAM;gBACR,CAAC;gBACD,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9G,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;wBACpG,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC5B,CAAC;gBACH,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,IAAI,OAAO,KAAK,CAAC,CAAC;gBAAE,SAAS;YAE7B,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,2BAA2B;gBAC3B,IAAI,SAAS,GAAG,EAAE,CAAC;gBACnB,IAAI,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACvC,IAAI,UAAU,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;wBAC/D,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBAED,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,2BAA2B,CAAC;gBAC3F,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG;qBAC7B,OAAO,CAAC,iCAAiC,EAAE,EAAE,CAAC;qBAC9C,IAAI,EAAE,CAAC;gBAEV,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,eAAe,GAAG,CAAC;gBAErD,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;oBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,UAAU,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,qCAAqC;oBACjF,MAAM,EACJ,oFAAoF;wBACpF,4GAA4G;oBAC9G,UAAU,EAAE,oCAAoC,YAAY,oDAAoD;oBAChH,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACtB,IAAI,EAAE,IAAI,CAAC,SAAS;oBACpB,MAAM,EAAE,IAAI,CAAC,WAAW;oBACxB,WAAW,EAAE,IAAI,CAAC,GAAG;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/src/rules/prismaRenameDropAdd.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ddlforge Rule: Prisma Silent Field Rename (Destructive Data Loss)
+ *
+ * Detects paired DROP COLUMN + ADD COLUMN on the same table, which Prisma
+ * generates for renamed fields, causing irreversible production data wipe.
+ *
+ * Severity: BLOCKER
+ */
+import { Rule } from './types.js';
+export declare const prismaRenameDropAddRule: Rule;
+//# sourceMappingURL=prismaRenameDropAdd.d.ts.map

package/dist/src/rules/prismaRenameDropAdd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prismaRenameDropAdd.d.ts","sourceRoot":"","sources":["../../../src/rules/prismaRenameDropAdd.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAwB,MAAM,YAAY,CAAC;AA0ExD,eAAO,MAAM,uBAAuB,EAAE,IAuFrC,CAAC"}

package/dist/src/rules/prismaRenameDropAdd.js

@@ -0,0 +1,144 @@
+/**
+ * ddlforge Rule: Prisma Silent Field Rename (Destructive Data Loss)
+ *
+ * Detects paired DROP COLUMN + ADD COLUMN on the same table, which Prisma
+ * generates for renamed fields, causing irreversible production data wipe.
+ *
+ * Severity: BLOCKER
+ */
+import { PostgresLockLevel } from '../engine/locks.js';
+function parseAlterSubcommands(tokens) {
+    const results = [];
+    let parenDepth = 0;
+    let i = 0;
+    while (i < tokens.length) {
+        if (tokens[i].value === '(') {
+            parenDepth++;
+            i++;
+            continue;
+        }
+        if (tokens[i].value === ')') {
+            parenDepth--;
+            i++;
+            continue;
+        }
+        if (parenDepth === 0) {
+            // Match DROP [COLUMN] [IF EXISTS] <col>
+            if (tokens[i].value === 'DROP') {
+                let nextIdx = i + 1;
+                if (tokens[nextIdx]?.value === 'COLUMN')
+                    nextIdx++;
+                if (tokens[nextIdx]?.value === 'IF' && tokens[nextIdx + 1]?.value === 'EXISTS')
+                    nextIdx += 2;
+                // Make sure it's not DROP CONSTRAINT or DROP INDEX
+                if (tokens[i + 1]?.value !== 'CONSTRAINT' && tokens[i + 1]?.value !== 'INDEX') {
+                    const colName = tokens[nextIdx]?.raw;
+                    if (colName) {
+                        results.push({ type: 'DROP_COLUMN', columnName: colName });
+                    }
+                }
+            }
+            // Match ADD [COLUMN] [IF NOT EXISTS] <col>
+            if (tokens[i].value === 'ADD') {
+                let nextIdx = i + 1;
+                if (tokens[nextIdx]?.value === 'COLUMN')
+                    nextIdx++;
+                if (tokens[nextIdx]?.value === 'IF' && tokens[nextIdx + 1]?.value === 'NOT' && tokens[nextIdx + 2]?.value === 'EXISTS')
+                    nextIdx += 3;
+                if (tokens[i + 1]?.value !== 'CONSTRAINT' && tokens[nextIdx]?.value !== 'CONSTRAINT') {
+                    const colName = tokens[nextIdx]?.raw;
+                    if (colName) {
+                        results.push({ type: 'ADD_COLUMN', columnName: colName });
+                    }
+                }
+            }
+        }
+        i++;
+    }
+    return results;
+}
+export const prismaRenameDropAddRule = {
+    id: 'prisma-silent-rename-data-loss',
+    name: 'Prisma Silent Field Rename (Destructive Data Loss)',
+    description: 'Detects paired DROP COLUMN and ADD COLUMN on the same table, preventing irreversible data destruction caused by Prisma field renames.',
+    defaultSeverity: 'BLOCKER',
+    lockLevel: PostgresLockLevel.ACCESS_EXCLUSIVE,
+    check(context) {
+        const findings = [];
+        const dropColumnsByTable = new Map();
+        const addColumnsByTable = new Map();
+        for (const stmt of context.statements) {
+            if (stmt.hasIgnore(this.id))
+                continue;
+            const tokens = stmt.tokens;
+            if (tokens.length < 5)
+                continue;
+            if (tokens[0].value !== 'ALTER' || tokens[1].value !== 'TABLE')
+                continue;
+            let idx = 2;
+            if (tokens[idx]?.value === 'ONLY')
+                idx++;
+            if (tokens[idx]?.value === 'IF' && tokens[idx + 1]?.value === 'EXISTS')
+                idx += 2;
+            const tableName = tokens[idx]?.raw ?? '';
+            if (!tableName)
+                continue;
+            const normalizedTable = tableName.replace(/^"|"$/g, '').toLowerCase();
+            idx++;
+            const subTokens = tokens.slice(idx);
+            const actions = parseAlterSubcommands(subTokens);
+            for (const action of actions) {
+                if (action.type === 'DROP_COLUMN') {
+                    const list = dropColumnsByTable.get(normalizedTable) ?? [];
+                    list.push({
+                        tableName,
+                        columnName: action.columnName,
+                        line: stmt.startLine,
+                        column: stmt.startColumn,
+                        raw: stmt.raw,
+                    });
+                    dropColumnsByTable.set(normalizedTable, list);
+                }
+                else if (action.type === 'ADD_COLUMN') {
+                    const list = addColumnsByTable.get(normalizedTable) ?? [];
+                    list.push({
+                        tableName,
+                        columnName: action.columnName,
+                        line: stmt.startLine,
+                        column: stmt.startColumn,
+                        raw: stmt.raw,
+                    });
+                    addColumnsByTable.set(normalizedTable, list);
+                }
+            }
+        }
+        // Correlate DROP and ADD on the same table
+        for (const [tableKey, dropList] of dropColumnsByTable.entries()) {
+            const addList = addColumnsByTable.get(tableKey);
+            if (!addList || addList.length === 0)
+                continue;
+            for (const drop of dropList) {
+                for (const add of addList) {
+                    findings.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        severity: this.defaultSeverity,
+                        lockLevel: this.lockLevel,
+                        message: `Destructive column replacement on "${drop.tableName}": dropped "${drop.columnName}" and added "${add.columnName}".`,
+                        detail: `Detected DROP COLUMN "${drop.columnName}" paired with ADD COLUMN "${add.columnName}" on table "${drop.tableName}". ` +
+                            'Prisma Migrate generates this pattern when a model field is renamed, which results in permanent, irreversible data destruction in production!',
+                        suggestion: `If this is a rename, replace the DROP/ADD pair with a non-destructive rename:\n` +
+                            `   ALTER TABLE ${drop.tableName} RENAME COLUMN ${drop.columnName} TO ${add.columnName};\n` +
+                            `Or use Prisma's @map attribute to map the Prisma field name without modifying the database column name.`,
+                        file: context.filePath,
+                        line: drop.line,
+                        column: drop.column,
+                        codeSnippet: `${drop.raw}\n-- paired with --\n${add.raw}`,
+                    });
+                }
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=prismaRenameDropAdd.js.map

package/dist/src/rules/prismaRenameDropAdd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prismaRenameDropAdd.js","sourceRoot":"","sources":["../../../src/rules/prismaRenameDropAdd.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAmBvD,SAAS,qBAAqB,CAAC,MAAe;IAC5C,MAAM,OAAO,GAAsE,EAAE,CAAC;IACtF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,UAAU,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,UAAU,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACrB,wCAAwC;YACxC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC/B,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,CAAC;gBAE7F,mDAAmD;gBACnD,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,OAAO,EAAE,CAAC;oBAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;oBACrC,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2CAA2C;YAC3C,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC9B,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBACnD,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,CAAC;gBAErI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,YAAY,EAAE,CAAC;oBACrF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;oBACrC,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,EAAE,EAAE,gCAAgC;IACpC,IAAI,EAAE,oDAAoD;IAC1D,WAAW,EAAE,uIAAuI;IACpJ,eAAe,EAAE,SAAS;IAC1B,SAAS,EAAE,iBAAiB,CAAC,gBAAgB;IAE7C,KAAK,CAAC,OAAoB;QACxB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA8B,CAAC;QACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA6B,CAAC;QAE/D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAEhC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO;gBAAE,SAAS;YAEzE,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,MAAM;gBAAE,GAAG,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,QAAQ;gBAAE,GAAG,IAAI,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACtE,GAAG,EAAE,CAAC;YAEN,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAEjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAClC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;oBAC3D,IAAI,CAAC,IAAI,CAAC;wBACR,SAAS;wBACT,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EAAE,IAAI,CAAC,SAAS;wBACpB,MAAM,EAAE,IAAI,CAAC,WAAW;wBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;qBACd,CAAC,CAAC;oBACH,kBAAkB,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAChD,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;oBAC1D,IAAI,CAAC,IAAI,CAAC;wBACR,SAAS;wBACT,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EAAE,IAAI,CAAC,SAAS;wBACpB,MAAM,EAAE,IAAI,CAAC,WAAW;wBACxB,GAAG,EAAE,IAAI,CAAC,GAAG;qBACd,CAAC,CAAC;oBACH,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE/C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;wBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,OAAO,EAAE,sCAAsC,IAAI,CAAC,SAAS,eAAe,IAAI,CAAC,UAAU,gBAAgB,GAAG,CAAC,UAAU,IAAI;wBAC7H,MAAM,EACJ,yBAAyB,IAAI,CAAC,UAAU,6BAA6B,GAAG,CAAC,UAAU,eAAe,IAAI,CAAC,SAAS,KAAK;4BACrH,+IAA+I;wBACjJ,UAAU,EACR,iFAAiF;4BACjF,kBAAkB,IAAI,CAAC,SAAS,kBAAkB,IAAI,CAAC,UAAU,OAAO,GAAG,CAAC,UAAU,KAAK;4BAC3F,yGAAyG;wBAC3G,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,wBAAwB,GAAG,CAAC,GAAG,EAAE;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/src/rules/setNotNullFullScan.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ddlforge Rule: ALTER COLUMN SET NOT NULL Full Scan Lock
+ *
+ * Severity: WARNING (or BLOCKER for PG < 12)
+ * Lock: ACCESS EXCLUSIVE
+ */
+import { Rule } from './types.js';
+export declare const setNotNullFullScanRule: Rule;
+//# sourceMappingURL=setNotNullFullScan.d.ts.map

package/dist/src/rules/setNotNullFullScan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setNotNullFullScan.d.ts","sourceRoot":"","sources":["../../../src/rules/setNotNullFullScan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAkC,MAAM,YAAY,CAAC;AA2ClE,eAAO,MAAM,sBAAsB,EAAE,IAwDpC,CAAC"}

package/dist/src/rules/setNotNullFullScan.js

@@ -0,0 +1,93 @@
+/**
+ * ddlforge Rule: ALTER COLUMN SET NOT NULL Full Scan Lock
+ *
+ * Severity: WARNING (or BLOCKER for PG < 12)
+ * Lock: ACCESS EXCLUSIVE
+ */
+import { PostgresLockLevel } from '../engine/locks.js';
+function extractSetNotNullClauses(tokens) {
+    const results = [];
+    let parenDepth = 0;
+    let i = 0;
+    while (i < tokens.length) {
+        if (tokens[i].value === '(') {
+            parenDepth++;
+            i++;
+            continue;
+        }
+        if (tokens[i].value === ')') {
+            parenDepth--;
+            i++;
+            continue;
+        }
+        if (parenDepth === 0 && tokens[i].value === 'ALTER') {
+            let currentIdx = i + 1;
+            if (tokens[currentIdx]?.value === 'COLUMN')
+                currentIdx++;
+            const columnName = tokens[currentIdx]?.raw;
+            currentIdx++;
+            if (tokens[currentIdx]?.value === 'SET' && tokens[currentIdx + 1]?.value === 'NOT' && tokens[currentIdx + 2]?.value === 'NULL') {
+                if (columnName) {
+                    results.push({ columnName });
+                }
+                i = currentIdx + 3;
+                continue;
+            }
+        }
+        i++;
+    }
+    return results;
+}
+export const setNotNullFullScanRule = {
+    id: 'set-not-null-full-scan',
+    name: 'ALTER COLUMN SET NOT NULL Full Scan Lock',
+    description: 'ALTER COLUMN SET NOT NULL scans the entire table under an ACCESS EXCLUSIVE lock to verify non-nullability.',
+    defaultSeverity: 'WARNING',
+    lockLevel: PostgresLockLevel.ACCESS_EXCLUSIVE,
+    check(context) {
+        const findings = [];
+        const severity = context.pgVersion < 12 ? 'BLOCKER' : this.defaultSeverity;
+        for (const stmt of context.statements) {
+            if (stmt.hasIgnore(this.id))
+                continue;
+            const tokens = stmt.tokens;
+            if (tokens.length < 6)
+                continue;
+            if (tokens[0].value !== 'ALTER' || tokens[1].value !== 'TABLE')
+                continue;
+            let idx = 2;
+            if (tokens[idx]?.value === 'ONLY')
+                idx++;
+            if (tokens[idx]?.value === 'IF' && tokens[idx + 1]?.value === 'EXISTS')
+                idx += 2;
+            const tableName = tokens[idx]?.raw ?? 'table';
+            idx++;
+            // Scan subcommands
+            const targets = extractSetNotNullClauses(tokens.slice(idx));
+            for (const target of targets) {
+                findings.push({
+                    ruleId: this.id,
+                    ruleName: this.name,
+                    severity,
+                    lockLevel: this.lockLevel,
+                    message: `Direct ALTER COLUMN "${target.columnName}" SET NOT NULL on table "${tableName}".`,
+                    detail: `Setting NOT NULL directly forces a full table scan while holding an ACCESS EXCLUSIVE lock. ` +
+                        `This blocks all reads and writes to "${tableName}" for the duration of the scan.`,
+                    suggestion: `Safe zero-downtime 3-step pattern:\n` +
+                        `   1. Add check constraint NOT VALID:\n` +
+                        `      ALTER TABLE ${tableName} ADD CONSTRAINT chk_${target.columnName}_not_null CHECK (${target.columnName} IS NOT NULL) NOT VALID;\n` +
+                        `   2. Validate constraint without blocking writes:\n` +
+                        `      ALTER TABLE ${tableName} VALIDATE CONSTRAINT chk_${target.columnName}_not_null;\n` +
+                        `   3. Apply SET NOT NULL (instant in PG 12+ due to validated constraint):\n` +
+                        `      ALTER TABLE ${tableName} ALTER COLUMN ${target.columnName} SET NOT NULL;`,
+                    file: context.filePath,
+                    line: stmt.startLine,
+                    column: stmt.startColumn,
+                    codeSnippet: stmt.raw,
+                });
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=setNotNullFullScan.js.map

package/dist/src/rules/setNotNullFullScan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setNotNullFullScan.js","sourceRoot":"","sources":["../../../src/rules/setNotNullFullScan.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAGvD,SAAS,wBAAwB,CAAC,MAAe;IAC/C,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,UAAU,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,UAAU,EAAE,CAAC;YACb,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YACpD,IAAI,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,QAAQ;gBAAE,UAAU,EAAE,CAAC;YAEzD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC;YAC3C,UAAU,EAAE,CAAC;YAEb,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC;gBAC/H,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC/B,CAAC;gBACD,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;QACH,CAAC;QAED,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,0CAA0C;IAChD,WAAW,EAAE,4GAA4G;IACzH,eAAe,EAAE,SAAS;IAC1B,SAAS,EAAE,iBAAiB,CAAC,gBAAgB;IAE7C,KAAK,CAAC,OAAoB;QACxB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAa,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QAErF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,SAAS;YAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAEhC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO;gBAAE,SAAS;YAEzE,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,MAAM;gBAAE,GAAG,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,KAAK,QAAQ;gBAAE,GAAG,IAAI,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC;YAC9C,GAAG,EAAE,CAAC;YAEN,mBAAmB;YACnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAE5D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC;oBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,QAAQ;oBACR,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,wBAAwB,MAAM,CAAC,UAAU,4BAA4B,SAAS,IAAI;oBAC3F,MAAM,EACJ,6FAA6F;wBAC7F,wCAAwC,SAAS,iCAAiC;oBACpF,UAAU,EACR,sCAAsC;wBACtC,yCAAyC;wBACzC,qBAAqB,SAAS,uBAAuB,MAAM,CAAC,UAAU,oBAAoB,MAAM,CAAC,UAAU,4BAA4B;wBACvI,sDAAsD;wBACtD,qBAAqB,SAAS,4BAA4B,MAAM,CAAC,UAAU,cAAc;wBACzF,6EAA6E;wBAC7E,qBAAqB,SAAS,iBAAiB,MAAM,CAAC,UAAU,gBAAgB;oBAClF,IAAI,EAAE,OAAO,CAAC,QAAQ;oBACtB,IAAI,EAAE,IAAI,CAAC,SAAS;oBACpB,MAAM,EAAE,IAAI,CAAC,WAAW;oBACxB,WAAW,EAAE,IAAI,CAAC,GAAG;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/src/rules/transactionTrap.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ddlforge Rule: CONCURRENTLY inside Transaction Trap
+ *
+ * Severity: BLOCKER
+ * Engine behavior: Postgres aborts execution with `ERROR: CREATE INDEX CONCURRENTLY cannot run inside a transaction block`
+ */
+import { Rule } from './types.js';
+export declare const transactionTrapRule: Rule;
+//# sourceMappingURL=transactionTrap.d.ts.map

package/dist/src/rules/transactionTrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactionTrap.d.ts","sourceRoot":"","sources":["../../../src/rules/transactionTrap.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAwB,MAAM,YAAY,CAAC;AA4BxD,eAAO,MAAM,mBAAmB,EAAE,IA+EjC,CAAC"}

package/dist/src/rules/transactionTrap.js

@@ -0,0 +1,104 @@
+/**
+ * ddlforge Rule: CONCURRENTLY inside Transaction Trap
+ *
+ * Severity: BLOCKER
+ * Engine behavior: Postgres aborts execution with `ERROR: CREATE INDEX CONCURRENTLY cannot run inside a transaction block`
+ */
+import { PostgresLockLevel } from '../engine/locks.js';
+function isConcurrentIndexStatement(tokens) {
+    if (tokens.length < 3)
+        return false;
+    // CREATE [UNIQUE] INDEX CONCURRENTLY
+    if (tokens[0].value === 'CREATE') {
+        let idx = 1;
+        if (tokens[idx]?.value === 'UNIQUE')
+            idx++;
+        if (tokens[idx]?.value === 'INDEX') {
+            for (let i = idx + 1; i < tokens.length; i++) {
+                if (tokens[i].value === 'ON')
+                    break;
+                if (tokens[i].value === 'CONCURRENTLY')
+                    return true;
+            }
+        }
+    }
+    // DROP INDEX CONCURRENTLY
+    if (tokens[0].value === 'DROP' && tokens[1]?.value === 'INDEX') {
+        for (let i = 2; i < tokens.length; i++) {
+            if (tokens[i].value === 'CONCURRENTLY')
+                return true;
+        }
+    }
+    return false;
+}
+export const transactionTrapRule = {
+    id: 'concurrent-index-in-transaction',
+    name: 'CONCURRENTLY inside Transaction Trap',
+    description: 'PostgreSQL aborts transactions containing concurrent index builds or drops.',
+    defaultSeverity: 'BLOCKER',
+    lockLevel: PostgresLockLevel.NONE,
+    check(context) {
+        const findings = [];
+        let inExplicitTransaction = false;
+        let transactionStartLine = 1;
+        for (const stmt of context.statements) {
+            const tokens = stmt.tokens;
+            if (tokens.length === 0)
+                continue;
+            const firstVal = tokens[0].value;
+            // Detect transaction start
+            if (firstVal === 'BEGIN' || (firstVal === 'START' && tokens[1]?.value === 'TRANSACTION')) {
+                inExplicitTransaction = true;
+                transactionStartLine = stmt.startLine;
+                continue;
+            }
+            // Detect transaction end
+            if (firstVal === 'COMMIT' || firstVal === 'ROLLBACK' || firstVal === 'END') {
+                inExplicitTransaction = false;
+                continue;
+            }
+            // Check if this statement is CREATE INDEX CONCURRENTLY or DROP INDEX CONCURRENTLY
+            const isConcurrentIndexOp = isConcurrentIndexStatement(tokens);
+            if (isConcurrentIndexOp) {
+                if (stmt.hasIgnore(this.id))
+                    continue;
+                // Scenario 1: Inside an explicit transaction block
+                if (inExplicitTransaction) {
+                    findings.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        severity: this.defaultSeverity,
+                        lockLevel: this.lockLevel,
+                        message: 'CONCURRENTLY index operation cannot run inside an explicit transaction block.',
+                        detail: `Statement at line ${stmt.startLine} is inside a transaction block started at line ${transactionStartLine}. ` +
+                            'PostgreSQL rejects concurrent index operations with "ERROR: CREATE/DROP INDEX CONCURRENTLY cannot run inside a transaction block".',
+                        suggestion: 'Remove the enclosing BEGIN ... COMMIT block and execute the CONCURRENTLY statement standalone.',
+                        file: context.filePath,
+                        line: stmt.startLine,
+                        column: stmt.startColumn,
+                        codeSnippet: stmt.raw,
+                    });
+                }
+                // Scenario 2: Prisma migration without -- prisma:no-transaction
+                if (context.isPrismaMigration && !context.hasFilePrismaNoTransaction) {
+                    findings.push({
+                        ruleId: this.id,
+                        ruleName: this.name,
+                        severity: this.defaultSeverity,
+                        lockLevel: this.lockLevel,
+                        message: 'Concurrent index operation in Prisma migration requires "-- prisma:no-transaction".',
+                        detail: 'Prisma Migrate executes every migration inside an implicit transaction block. ' +
+                            'Without the "-- prisma:no-transaction" directive, PostgreSQL will abort migration application.',
+                        suggestion: 'Add `-- prisma:no-transaction` at the very top of this migration file.',
+                        file: context.filePath,
+                        line: stmt.startLine,
+                        column: stmt.startColumn,
+                        codeSnippet: stmt.raw,
+                    });
+                }
+            }
+        }
+        return findings;
+    },
+};
+//# sourceMappingURL=transactionTrap.js.map

package/dist/src/rules/transactionTrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactionTrap.js","sourceRoot":"","sources":["../../../src/rules/transactionTrap.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,SAAS,0BAA0B,CAAC,MAAgC;IAClE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEpC,qCAAqC;IACrC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,QAAQ;YAAE,GAAG,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,OAAO,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI;oBAAE,MAAM;gBACpC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc;oBAAE,OAAO,IAAI,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,OAAO,EAAE,CAAC;QAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,cAAc;gBAAE,OAAO,IAAI,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,EAAE,EAAE,iCAAiC;IACrC,IAAI,EAAE,sCAAsC;IAC5C,WAAW,EAAE,6EAA6E;IAC1F,eAAe,EAAE,SAAS;IAC1B,SAAS,EAAE,iBAAiB,CAAC,IAAI;IAEjC,KAAK,CAAC,OAAoB;QACxB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAClC,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAElC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAEjC,2BAA2B;YAC3B,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,aAAa,CAAC,EAAE,CAAC;gBACzF,qBAAqB,GAAG,IAAI,CAAC;gBAC7B,oBAAoB,GAAG,IAAI,CAAC,SAAS,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,yBAAyB;YACzB,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC3E,qBAAqB,GAAG,KAAK,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,kFAAkF;YAClF,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;YAE/D,IAAI,mBAAmB,EAAE,CAAC;gBACxB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAEtC,mDAAmD;gBACnD,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;wBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,OAAO,EAAE,+EAA+E;wBACxF,MAAM,EACJ,qBAAqB,IAAI,CAAC,SAAS,kDAAkD,oBAAoB,IAAI;4BAC7G,oIAAoI;wBACtI,UAAU,EAAE,gGAAgG;wBAC5G,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,IAAI,CAAC,SAAS;wBACpB,MAAM,EAAE,IAAI,CAAC,WAAW;wBACxB,WAAW,EAAE,IAAI,CAAC,GAAG;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,gEAAgE;gBAChE,IAAI,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;oBACrE,QAAQ,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,QAAQ,EAAE,IAAI,CAAC,eAAe;wBAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,OAAO,EAAE,qFAAqF;wBAC9F,MAAM,EACJ,gFAAgF;4BAChF,gGAAgG;wBAClG,UAAU,EAAE,wEAAwE;wBACpF,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,IAAI,CAAC,SAAS;wBACpB,MAAM,EAAE,IAAI,CAAC,WAAW;wBACxB,WAAW,EAAE,IAAI,CAAC,GAAG;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC"}

package/dist/src/rules/types.d.ts

@@ -0,0 +1,36 @@
+/**
+ * ddlforge - Rule engine types, Finding, and Context interfaces
+ */
+import { Statement } from '../lexer/tokens.js';
+import { PostgresLockLevel } from '../engine/locks.js';
+export type Severity = 'BLOCKER' | 'WARNING' | 'ADVISORY';
+export interface Finding {
+    ruleId: string;
+    ruleName: string;
+    severity: Severity;
+    lockLevel: PostgresLockLevel;
+    message: string;
+    detail: string;
+    suggestion: string;
+    file: string;
+    line: number;
+    column: number;
+    codeSnippet: string;
+}
+export interface RuleContext {
+    filePath: string;
+    fileContent: string;
+    pgVersion: number;
+    statements: Statement[];
+    isPrismaMigration: boolean;
+    hasFilePrismaNoTransaction: boolean;
+}
+export interface Rule {
+    id: string;
+    name: string;
+    description: string;
+    defaultSeverity: Severity;
+    lockLevel: PostgresLockLevel;
+    check(context: RuleContext): Finding[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/rules/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/rules/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE1D,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,QAAQ,CAAC;IAC1B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,EAAE,CAAC;CACxC"}

package/dist/src/rules/types.js

@@ -0,0 +1,5 @@
+/**
+ * ddlforge - Rule engine types, Finding, and Context interfaces
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/rules/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/rules/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/src/rules/unbatchedBackfill.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ddlforge Rule: Unbatched DML in Migration (Bare UPDATE/DELETE)
+ *
+ * Severity: WARNING
+ * Lock: ROW EXCLUSIVE
+ */
+import { Rule } from './types.js';
+export declare const unbatchedBackfillRule: Rule;
+//# sourceMappingURL=unbatchedBackfill.d.ts.map

package/dist/src/rules/unbatchedBackfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbatchedBackfill.d.ts","sourceRoot":"","sources":["../../../src/rules/unbatchedBackfill.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAwB,MAAM,YAAY,CAAC;AAGxD,eAAO,MAAM,qBAAqB,EAAE,IAyDnC,CAAC"}