migrasafe 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 febrifelis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,179 @@
+# migrasafe
+
+> Detect unsafe SQL migrations before deploying to production.
+
+Zero external dependencies. Single binary. Works in any CI pipeline.
+
+[![npm version](https://img.shields.io/npm/v/migrasafe)](https://www.npmjs.com/package/migrasafe)
+[![license](https://img.shields.io/npm/l/migrasafe)](./LICENSE)
+
+---
+
+## The Problem
+
+Running a bad migration in production can cause data loss, table locks, or downtime — often irreversible. `migrasafe` catches these issues **before** they reach your database.
+
+---
+
+## Install
+
+```bash
+# Run without installing
+npx migrasafe check ./migrations/
+
+# Or install globally
+npm install -g migrasafe
+```
+
+---
+
+## Usage
+
+```bash
+# Check a single file
+migrasafe check migration.sql
+
+# Check a directory (scans all .sql files, sorted by name)
+migrasafe check ./migrations/
+
+# JSON output — for CI pipelines and scripting
+migrasafe check ./migrations/ --format json
+```
+
+**Exit codes:** `0` = safe, `1` = unsafe or error.
+
+---
+
+## Example Output
+
+```
+Scanning 3 file(s)...
+
+migrations/V2__add_status.sql
+  ⚠ HIGH      Line 1
+  Statement: ALTER TABLE users ADD COLUMN status VARCHAR(20) NOT NULL
+  Problem  : ADD COLUMN NOT NULL without DEFAULT will fail on non-empty tables.
+  Fix      : Use 3 steps: (1) ADD COLUMN nullable, (2) backfill data, (3) SET NOT NULL.
+
+  ✖ CRITICAL  Line 2
+  Statement: DROP TABLE old_orders
+  Problem  : DROP TABLE is irreversible — all data will be permanently lost.
+  Fix      : Use soft-delete or rename the table first, then drop it in a later migration.
+
+── Summary ──────────────────────────────
+  CRITICAL : 1
+  HIGH     : 1
+  Total    : 2 issue(s) across 3 file(s)
+
+✖ UNSAFE — resolve all CRITICAL/HIGH issues before deploying
+```
+
+---
+
+## Rules
+
+| Rule | Severity | Why |
+|---|---|---|
+| `DROP DATABASE` | CRITICAL | Destroys the entire database and all its data |
+| `ALTER SYSTEM` | CRITICAL | Modifies server config — wrong value can crash the server |
+| `DROP OWNED BY` | CRITICAL | Silently drops all objects owned by a role |
+| `DROP TABLE` | CRITICAL | Irreversible — all data permanently lost |
+| `DROP SCHEMA` | CRITICAL | Irreversible — all tables, views, and data lost |
+| `DROP COLUMN` | CRITICAL | Irreversible — column data permanently lost |
+| `TRUNCATE` | CRITICAL | Deletes all rows immediately |
+| `DELETE` without `WHERE` | CRITICAL | Deletes all rows |
+| `UPDATE` without `WHERE` | HIGH | Modifies all rows |
+| `RENAME TABLE` | HIGH | Breaking change for existing queries |
+| `RENAME COLUMN` | HIGH | Breaking change for existing queries |
+| `ADD COLUMN NOT NULL` without `DEFAULT` | HIGH | Fails on non-empty tables |
+| `ALTER COLUMN TYPE` | HIGH | May fail if data cannot be cast |
+| `ALTER COLUMN SET NOT NULL` | HIGH | Fails if any row has NULL in that column |
+| `CREATE INDEX` without `CONCURRENTLY` | MEDIUM | Locks table during index build |
+| `DROP INDEX` | MEDIUM | May degrade query performance |
+| `DROP CONSTRAINT` | MEDIUM | Removes data validation |
+| `ADD UNIQUE CONSTRAINT` | MEDIUM | Fails if duplicate values exist |
+| `ADD CHECK CONSTRAINT` | MEDIUM | Fails if existing rows violate the constraint |
+| `DROP SEQUENCE` | MEDIUM | May break auto-increment or application code |
+| `DROP TYPE` | MEDIUM | May break columns or functions using this type |
+| `LOCK TABLE` | MEDIUM | Blocks all reads and writes during the lock |
+| `CLUSTER` | MEDIUM | Locks the table for the full duration of the operation |
+| `REINDEX` without `CONCURRENTLY` | MEDIUM | Locks index and blocks reads/writes |
+| `DETACH PARTITION` | MEDIUM | May break queries targeting the partition |
+| `ALTER TABLE DISABLE TRIGGER` | HIGH | Bypasses trigger-based validation — may allow dirty data |
+| `VACUUM FULL` | MEDIUM | Locks the table exclusively for the full duration |
+| `DROP DOMAIN` | MEDIUM | May break columns or functions that use this domain |
+| `DROP AGGREGATE` | MEDIUM | May break queries that use this aggregate function |
+
+---
+
+## CI Integration
+
+### GitHub Actions
+
+```yaml
+- name: Check migration safety
+  run: npx migrasafe check ./migrations/
+```
+
+### GitLab CI
+
+```yaml
+check-migrations:
+  script:
+    - npx migrasafe check ./migrations/
+```
+
+### Pre-commit hook
+
+```bash
+#!/bin/sh
+npx migrasafe check ./migrations/
+```
+
+---
+
+## JSON Output
+
+Use `--format json` for structured output in scripts or dashboards:
+
+```json
+{
+  "safe": false,
+  "summary": {
+    "critical": 1,
+    "high": 1,
+    "medium": 0,
+    "total": 2
+  },
+  "files": [
+    {
+      "file": "migrations/V2__add_status.sql",
+      "issueCount": 2,
+      "issues": [
+        {
+          "severity": "CRITICAL",
+          "line": 2,
+          "statement": "DROP TABLE old_orders",
+          "message": "DROP TABLE is irreversible — all data will be permanently lost.",
+          "suggestion": "Use soft-delete or rename the table first, then drop it in a later migration."
+        }
+      ]
+    }
+  ]
+}
+```
+
+---
+
+## What It Does NOT Flag
+
+- `DELETE FROM table WHERE condition` — safe, has a WHERE clause
+- `UPDATE table SET col = val WHERE condition` — safe, has a WHERE clause
+- `CREATE INDEX CONCURRENTLY` — safe, no table lock
+- Keywords inside SQL string literals or comments — ignored
+
+---
+
+## License
+
+[MIT](./LICENSE) © [febrifelis](https://github.com/febrifelis)

package/dist/checker/checker.d.ts

@@ -0,0 +1,5 @@
+import { CheckResult, ScanResult } from "../types";
+import { MigrasafeConfig } from "../config";
+export declare function checkFile(filePath: string, config?: MigrasafeConfig): CheckResult;
+export declare function checkDirectory(dirPath: string, config?: MigrasafeConfig): CheckResult[];
+export declare function buildScanResult(results: CheckResult[]): ScanResult;

package/dist/checker/checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.d.ts","sourceRoot":"","sources":["../../src/checker/checker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAoEnD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAQvD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE,CAO7D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CAclE"}

package/dist/checker/checker.js

@@ -0,0 +1,185 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkFile = checkFile;
+exports.checkDirectory = checkDirectory;
+exports.buildScanResult = buildScanResult;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const rules_1 = require("./rules");
+const MAX_FILE_SIZE_BYTES = 10 * 1024 * 1024; // 10 MB
+const MAX_STATEMENTS = 10000;
+function splitStatements(sql) {
+    const results = [];
+    let current = "";
+    let startLine = 1;
+    let currentLine = 1;
+    let inLineComment = false;
+    let inBlockComment = false;
+    let inSingleQuote = false;
+    let inDoubleQuote = false;
+    let dollarTag = "";
+    let inDollarQuote = false;
+    for (let i = 0; i < sql.length; i++) {
+        const ch = sql[i];
+        const next = sql[i + 1];
+        if (ch === "\n") {
+            inLineComment = false;
+            currentLine++;
+        }
+        // --- dollar-quoted strings (PostgreSQL) ---
+        if (!inLineComment && !inBlockComment && !inSingleQuote && !inDoubleQuote) {
+            if (!inDollarQuote && ch === "$") {
+                const rest = sql.slice(i);
+                const match = rest.match(/^\$([^$]*)\$/);
+                if (match) {
+                    dollarTag = match[0];
+                    current += dollarTag;
+                    i += dollarTag.length - 1;
+                    inDollarQuote = true;
+                    continue;
+                }
+            }
+            if (inDollarQuote) {
+                const rest = sql.slice(i);
+                if (rest.startsWith(dollarTag)) {
+                    current += dollarTag;
+                    i += dollarTag.length - 1;
+                    inDollarQuote = false;
+                    dollarTag = "";
+                }
+                else {
+                    current += ch;
+                }
+                continue;
+            }
+        }
+        if (inDollarQuote) {
+            current += ch;
+            continue;
+        }
+        // --- single-quoted strings ---
+        if (!inLineComment && !inBlockComment && !inDoubleQuote) {
+            if (ch === "'" && !inSingleQuote) {
+                inSingleQuote = true;
+                current += ch;
+                continue;
+            }
+            if (inSingleQuote) {
+                current += ch;
+                // handle escaped quote ''
+                if (ch === "'" && next === "'") {
+                    current += next;
+                    i++;
+                }
+                else if (ch === "'") {
+                    inSingleQuote = false;
+                }
+                continue;
+            }
+        }
+        // --- double-quoted identifiers ---
+        if (!inLineComment && !inBlockComment && !inSingleQuote) {
+            if (ch === '"' && !inDoubleQuote) {
+                inDoubleQuote = true;
+                current += ch;
+                continue;
+            }
+            if (inDoubleQuote) {
+                current += ch;
+                if (ch === '"') {
+                    inDoubleQuote = false;
+                }
+                continue;
+            }
+        }
+        if (inLineComment)
+            continue;
+        if (inBlockComment) {
+            if (ch === "*" && next === "/") {
+                inBlockComment = false;
+                i++;
+            }
+            continue;
+        }
+        if (ch === "-" && next === "-") {
+            inLineComment = true;
+            continue;
+        }
+        if (ch === "/" && next === "*") {
+            inBlockComment = true;
+            continue;
+        }
+        if (ch === ";") {
+            const trimmed = current.trim();
+            if (trimmed)
+                results.push({ statement: trimmed, line: startLine });
+            current = "";
+            startLine = currentLine + (next === "\n" ? 1 : 0);
+        }
+        else {
+            current += ch;
+        }
+    }
+    const remaining = current.trim();
+    if (remaining)
+        results.push({ statement: remaining, line: startLine });
+    return results;
+}
+function checkFile(filePath, config = {}) {
+    const stat = fs_1.default.statSync(filePath);
+    // Guard: skip symlinks
+    if (stat.isSymbolicLink()) {
+        throw new Error(`Skipping symlink: ${filePath}`);
+    }
+    // Guard: file size limit
+    if (stat.size > MAX_FILE_SIZE_BYTES) {
+        throw new Error(`File too large (${(stat.size / 1024 / 1024).toFixed(1)} MB > 10 MB limit): ${filePath}`);
+    }
+    const raw = fs_1.default.readFileSync(filePath, "utf-8");
+    // Guard: binary file detection (null bytes)
+    if (raw.includes("\0")) {
+        throw new Error(`Binary file skipped: ${filePath}`);
+    }
+    const content = raw.replace(/\r\n/g, "\n").replace(/\r/g, "\n").replace(/^/, "");
+    const fileName = path_1.default.basename(filePath);
+    const statements = splitStatements(content);
+    // Guard: max statement count
+    if (statements.length > MAX_STATEMENTS) {
+        throw new Error(`Too many statements (${statements.length} > ${MAX_STATEMENTS} limit): ${filePath}`);
+    }
+    const issues = statements.flatMap(({ statement, line }) => (0, rules_1.checkStatement)(statement, line, fileName, config.disableRules));
+    return { file: filePath, issues };
+}
+function checkDirectory(dirPath, config = {}) {
+    const entries = fs_1.default.readdirSync(dirPath, { withFileTypes: true });
+    const ignorePatterns = (config.ignore ?? []).map((p) => new RegExp(p));
+    const sqlFiles = entries
+        .filter((e) => {
+        if (!e.isFile() || e.isSymbolicLink())
+            return false;
+        if (!e.name.toLowerCase().endsWith(".sql"))
+            return false;
+        const filePath = path_1.default.join(dirPath, e.name);
+        return !ignorePatterns.some((re) => re.test(filePath));
+    })
+        .sort((a, b) => a.name.localeCompare(b.name));
+    return sqlFiles.map((e) => checkFile(path_1.default.join(dirPath, e.name), config));
+}
+function buildScanResult(results) {
+    const allIssues = results.flatMap((r) => r.issues);
+    const criticalCount = allIssues.filter((i) => i.severity === "CRITICAL").length;
+    const highCount = allIssues.filter((i) => i.severity === "HIGH").length;
+    const mediumCount = allIssues.filter((i) => i.severity === "MEDIUM").length;
+    return {
+        results,
+        totalIssues: allIssues.length,
+        criticalCount,
+        highCount,
+        mediumCount,
+        safe: criticalCount === 0 && highCount === 0,
+    };
+}
+//# sourceMappingURL=checker.js.map

package/dist/checker/checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.js","sourceRoot":"","sources":["../../src/checker/checker.ts"],"names":[],"mappings":";;;;;AA2GA,8BAqCC;AAED,wCAcC;AAED,0CAcC;AAhLD,4CAAoB;AACpB,gDAAwB;AAExB,mCAAyC;AAGzC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AACtD,MAAM,cAAc,GAAG,KAAM,CAAC;AAE9B,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAExB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,aAAa,GAAG,KAAK,CAAC;YACtB,WAAW,EAAE,CAAC;QAChB,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1E,IAAI,CAAC,aAAa,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACzC,IAAI,KAAK,EAAE,CAAC;oBACV,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACrB,OAAO,IAAI,SAAS,CAAC;oBACrB,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;oBAC1B,aAAa,GAAG,IAAI,CAAC;oBACrB,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC/B,OAAO,IAAI,SAAS,CAAC;oBACrB,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;oBAC1B,aAAa,GAAG,KAAK,CAAC;oBACtB,SAAS,GAAG,EAAE,CAAC;gBACjB,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAE/C,gCAAgC;QAChC,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;YACxD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YACpF,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,IAAI,EAAE,CAAC;gBACd,0BAA0B;gBAC1B,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBAAC,OAAO,IAAI,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;qBACpD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,aAAa,GAAG,KAAK,CAAC;gBAAC,CAAC;gBAC/C,SAAS;YACX,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;YACxD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YACpF,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,IAAI,EAAE,CAAC;gBACd,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;oBAAC,aAAa,GAAG,KAAK,CAAC;gBAAC,CAAC;gBAC1C,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,aAAa;YAAE,SAAS;QAE5B,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,cAAc,GAAG,KAAK,CAAC;gBAAC,CAAC,EAAE,CAAC;YAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAAC,aAAa,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACnE,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAAC,cAAc,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAEpE,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACnE,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,WAAW,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,SAAS,CAAC,QAAgB,EAAE,SAA0B,EAAE;IACtE,MAAM,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEnC,uBAAuB;IACvB,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,yBAAyB;IACzB,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,mBAAmB,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,QAAQ,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,cAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE5C,6BAA6B;IAC7B,IAAI,UAAU,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,wBAAwB,UAAU,CAAC,MAAM,MAAM,cAAc,YAAY,QAAQ,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CACxD,IAAA,sBAAc,EAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAC/D,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,SAAgB,cAAc,CAAC,OAAe,EAAE,SAA0B,EAAE;IAC1E,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACZ,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAgB,eAAe,CAAC,OAAsB;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAE5E,OAAO;QACL,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,MAAM;QAC7B,aAAa;QACb,SAAS;QACT,WAAW;QACX,IAAI,EAAE,aAAa,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/checker/rules.d.ts

@@ -0,0 +1,2 @@
+import { Issue } from "../types";
+export declare function checkStatement(statement: string, lineNumber: number, file: string, disableRules?: string[]): Issue[];

package/dist/checker/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/checker/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAY,MAAM,UAAU,CAAC;AAiG3C,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,KAAK,EAAE,CAmBT"}

package/dist/checker/rules.js

@@ -0,0 +1,261 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkStatement = checkStatement;
+const RULES = [
+    {
+        id: "DROP_DATABASE",
+        severity: "CRITICAL",
+        pattern: /\bDROP\s+DATABASE\b/i,
+        message: "DROP DATABASE is irreversible — the entire database and all its data will be permanently destroyed.",
+        suggestion: "Never run DROP DATABASE in a migration file. Back up the database and confirm with your team before dropping.",
+    },
+    {
+        id: "ALTER_SYSTEM",
+        severity: "CRITICAL",
+        pattern: /\bALTER\s+SYSTEM\b/i,
+        message: "ALTER SYSTEM modifies postgresql.conf directly — a wrong value can make the server unbootable.",
+        suggestion: "Never place ALTER SYSTEM in a migration file. Apply server config changes through your infrastructure tooling.",
+    },
+    {
+        id: "DROP_OWNED",
+        severity: "CRITICAL",
+        pattern: /\bDROP\s+OWNED\s+BY\b/i,
+        message: "DROP OWNED BY drops all objects owned by a role — this can silently destroy tables, sequences, and functions.",
+        suggestion: "Audit exactly which objects the role owns before running DROP OWNED BY.",
+    },
+    {
+        id: "DROP_TABLE",
+        severity: "CRITICAL",
+        pattern: /\bDROP\s+TABLE\b/i,
+        message: "DROP TABLE is irreversible — all data will be permanently lost.",
+        suggestion: "Use soft-delete or rename the table first, then drop it in a later migration.",
+    },
+    {
+        id: "DROP_SCHEMA",
+        severity: "CRITICAL",
+        pattern: /\bDROP\s+SCHEMA\b/i,
+        message: "DROP SCHEMA is irreversible — all tables, views, and data in the schema will be lost.",
+        suggestion: "Ensure all objects in the schema are migrated or backed up before dropping.",
+    },
+    {
+        id: "DROP_COLUMN",
+        severity: "CRITICAL",
+        pattern: /\bDROP\s+COLUMN\b/i,
+        message: "DROP COLUMN is irreversible — all column data will be permanently lost.",
+        suggestion: "Ensure no application code references this column before dropping it.",
+    },
+    {
+        id: "TRUNCATE",
+        severity: "CRITICAL",
+        pattern: /\bTRUNCATE\b/i,
+        message: "TRUNCATE will delete all rows in the table immediately.",
+        suggestion: "Do not run TRUNCATE in production unless absolutely intentional.",
+    },
+    {
+        id: "DELETE_WITHOUT_WHERE",
+        severity: "CRITICAL",
+        pattern: /\bDELETE\s+FROM\s+\S+\s*(?:;|$)/i,
+        message: "DELETE without WHERE will remove every row in the table.",
+        suggestion: "Add a WHERE clause to target only the intended rows.",
+    },
+    {
+        id: "UPDATE_WITHOUT_WHERE",
+        severity: "HIGH",
+        pattern: /\bUPDATE\s+\S+\s+SET\b(?![\s\S]*\bWHERE\b)/i,
+        message: "UPDATE without WHERE will modify every row in the table.",
+        suggestion: "Add a WHERE clause to target only the intended rows.",
+    },
+    {
+        id: "RENAME_TABLE",
+        severity: "HIGH",
+        pattern: /\bRENAME\s+TABLE\b|\bALTER\s+TABLE\s+\S+\s+RENAME\s+TO\b/i,
+        message: "RENAME TABLE is a breaking change — queries using the old name will fail.",
+        suggestion: "Create a view with the old name, or update all references before renaming.",
+    },
+    {
+        id: "RENAME_COLUMN",
+        severity: "HIGH",
+        pattern: /\bRENAME\s+COLUMN\b/i,
+        message: "RENAME COLUMN is a breaking change — queries using the old name will fail.",
+        suggestion: "Add the new column, backfill data, then drop the old column in a separate migration.",
+    },
+    {
+        id: "ADD_NOT_NULL_WITHOUT_DEFAULT",
+        severity: "HIGH",
+        pattern: /\bADD\s+COLUMN\s+\S+[\s\S]+?\bNOT\s+NULL\b(?![\s\S]*\bDEFAULT\b)/i,
+        message: "ADD COLUMN NOT NULL without DEFAULT will fail on non-empty tables.",
+        suggestion: "Use 3 steps: (1) ADD COLUMN nullable, (2) backfill data, (3) SET NOT NULL.",
+    },
+    {
+        id: "ALTER_COLUMN_TYPE",
+        severity: "HIGH",
+        pattern: /\bALTER\s+COLUMN\s+\S+\s+(?:TYPE|SET\s+DATA\s+TYPE)\b/i,
+        message: "ALTER COLUMN TYPE may fail if existing data cannot be cast to the new type.",
+        suggestion: "Add a USING clause or manually migrate data before changing the column type.",
+    },
+    {
+        id: "ALTER_COLUMN_SET_NOT_NULL",
+        severity: "HIGH",
+        pattern: /\bALTER\s+COLUMN\s+\S+\s+SET\s+NOT\s+NULL\b/i,
+        message: "ALTER COLUMN SET NOT NULL will fail if any existing rows contain NULL in that column.",
+        suggestion: "Backfill NULLs first: UPDATE table SET col = default WHERE col IS NULL, then SET NOT NULL.",
+    },
+    {
+        id: "CREATE_INDEX_WITHOUT_CONCURRENTLY",
+        severity: "MEDIUM",
+        pattern: /\bCREATE\s+(?:UNIQUE\s+)?INDEX\b(?!\s+CONCURRENTLY)/i,
+        message: "CREATE INDEX without CONCURRENTLY locks the table and blocks reads/writes.",
+        suggestion: "Use CREATE INDEX CONCURRENTLY to avoid table lock in production.",
+    },
+    {
+        id: "DROP_INDEX",
+        severity: "MEDIUM",
+        pattern: /\bDROP\s+INDEX\b/i,
+        message: "DROP INDEX may degrade query performance for queries that rely on this index.",
+        suggestion: "Verify no critical queries depend on this index before dropping it.",
+    },
+    {
+        id: "DROP_CONSTRAINT",
+        severity: "MEDIUM",
+        pattern: /\bDROP\s+CONSTRAINT\b/i,
+        message: "DROP CONSTRAINT removes data validation — may allow dirty data into the table.",
+        suggestion: "Ensure application-level validation is in place before dropping the constraint.",
+    },
+    {
+        id: "ADD_UNIQUE_CONSTRAINT",
+        severity: "MEDIUM",
+        pattern: /\bADD\s+CONSTRAINT\s+\S+\s+UNIQUE\b/i,
+        message: "ADD UNIQUE CONSTRAINT will fail if duplicate values exist in the column(s).",
+        suggestion: "Check for and remove duplicate values before adding the unique constraint.",
+    },
+    {
+        id: "DROP_SEQUENCE",
+        severity: "MEDIUM",
+        pattern: /\bDROP\s+SEQUENCE\b/i,
+        message: "DROP SEQUENCE may break auto-increment columns or application code that relies on it.",
+        suggestion: "Ensure no tables or application code reference this sequence before dropping it.",
+    },
+    {
+        id: "DROP_TYPE",
+        severity: "MEDIUM",
+        pattern: /\bDROP\s+TYPE\b/i,
+        message: "DROP TYPE may break columns or functions that use this type.",
+        suggestion: "Ensure no tables, functions, or application code reference this type before dropping it.",
+    },
+    {
+        id: "ADD_CHECK_CONSTRAINT",
+        severity: "MEDIUM",
+        pattern: /\bADD\s+CONSTRAINT\s+\S+\s+CHECK\b/i,
+        message: "ADD CHECK CONSTRAINT will fail if existing rows violate the constraint.",
+        suggestion: "Verify all existing rows satisfy the check condition before adding the constraint.",
+    },
+    {
+        id: "LOCK_TABLE",
+        severity: "MEDIUM",
+        pattern: /\bLOCK\s+TABLE\b/i,
+        message: "LOCK TABLE blocks all reads and writes for the duration of the lock.",
+        suggestion: "Minimize lock duration and run during low-traffic windows.",
+    },
+    {
+        id: "CLUSTER",
+        severity: "MEDIUM",
+        pattern: /\bCLUSTER\s+\S+\s+USING\b|\bCLUSTER\s+\S+\s*;/i,
+        message: "CLUSTER rewrites the table in index order and holds an exclusive lock throughout.",
+        suggestion: "Run CLUSTER during a maintenance window or consider pg_repack for online reordering.",
+    },
+    {
+        id: "REINDEX_WITHOUT_CONCURRENTLY",
+        severity: "MEDIUM",
+        pattern: /\bREINDEX\b(?!\s+(?:INDEX|TABLE|SCHEMA|DATABASE|SYSTEM)\s+CONCURRENTLY)/i,
+        message: "REINDEX without CONCURRENTLY locks the index and blocks reads/writes.",
+        suggestion: "Use REINDEX INDEX CONCURRENTLY to avoid locking.",
+    },
+    {
+        id: "DETACH_PARTITION",
+        severity: "MEDIUM",
+        pattern: /\bDETACH\s+PARTITION\b/i,
+        message: "DETACH PARTITION may break queries and application code targeting that partition.",
+        suggestion: "Ensure no application code directly references the partition before detaching.",
+    },
+    {
+        id: "DISABLE_TRIGGER",
+        severity: "HIGH",
+        pattern: /\bDISABLE\s+TRIGGER\b/i,
+        message: "DISABLE TRIGGER bypasses trigger-based validation — dirty data may enter the table.",
+        suggestion: "Re-enable the trigger immediately after the data operation and validate data integrity.",
+    },
+    {
+        id: "VACUUM_FULL",
+        severity: "MEDIUM",
+        pattern: /\bVACUUM\s+FULL\b/i,
+        message: "VACUUM FULL acquires an exclusive table lock for the full duration of the operation.",
+        suggestion: "Use regular VACUUM or pg_repack for online space reclamation.",
+    },
+    {
+        id: "DROP_DOMAIN",
+        severity: "MEDIUM",
+        pattern: /\bDROP\s+DOMAIN\b/i,
+        message: "DROP DOMAIN may break columns or functions that use this domain type.",
+        suggestion: "Ensure no tables or functions reference this domain before dropping it.",
+    },
+    {
+        id: "DROP_AGGREGATE",
+        severity: "MEDIUM",
+        pattern: /\bDROP\s+AGGREGATE\b/i,
+        message: "DROP AGGREGATE may break queries that use this aggregate function.",
+        suggestion: "Ensure no queries or views reference this aggregate before dropping it.",
+    },
+    // ── MySQL-specific rules ─────────────────────────────────────────────────
+    {
+        id: "MYSQL_DROP_DATABASE",
+        severity: "CRITICAL",
+        pattern: /\bDROP\s+(?:DATABASE|SCHEMA)\b/i,
+        message: "DROP DATABASE/SCHEMA is irreversible — all tables and data will be permanently lost.",
+        suggestion: "Back up the database and confirm with your team before dropping.",
+    },
+    {
+        id: "MYSQL_ALTER_TABLE_MODIFY_COLUMN",
+        severity: "HIGH",
+        pattern: /\bALTER\s+TABLE\s+\S+\s+MODIFY\s+(?:COLUMN\s+)?\S+/i,
+        message: "MODIFY COLUMN may fail if existing data cannot be cast to the new type (MySQL).",
+        suggestion: "Test the type change on a copy of the data first.",
+    },
+    {
+        id: "MYSQL_ALTER_TABLE_CHANGE",
+        severity: "HIGH",
+        pattern: /\bALTER\s+TABLE\s+\S+\s+CHANGE\s+(?:COLUMN\s+)?/i,
+        message: "CHANGE COLUMN renames and/or changes type — a breaking change for queries using the old name (MySQL).",
+        suggestion: "Update all application code before renaming the column.",
+    },
+];
+function sanitize(sql) {
+    return sql
+        .replace(/\$([^$]*)\$[\s\S]*?\$\1\$/g, "") // dollar-quoted bodies
+        .replace(/--[^\n]*/g, " ") // line comments
+        .replace(/\/\*[\s\S]*?\*\//g, " ") // block comments
+        .replace(/'(?:[^'\\]|\\.)*'/g, "''") // single-quoted strings
+        .replace(/"(?:[^"\\]|\\.)*"/g, '""'); // double-quoted identifiers
+}
+function checkStatement(statement, lineNumber, file, disableRules = []) {
+    const issues = [];
+    const trimmed = statement.trim();
+    if (!trimmed)
+        return issues;
+    const sanitized = sanitize(trimmed);
+    for (const rule of RULES) {
+        if (disableRules.includes(rule.id))
+            continue;
+        if (rule.pattern.test(sanitized)) {
+            issues.push({
+                severity: rule.severity,
+                file,
+                line: lineNumber,
+                statement: trimmed.split("\n")[0].substring(0, 120),
+                message: rule.message,
+                suggestion: rule.suggestion,
+            });
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=rules.js.map

package/dist/checker/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/checker/rules.ts"],"names":[],"mappings":";;AAwPA,wCA2BC;AAzQD,MAAM,KAAK,GAAW;IACpB;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,qGAAqG;QAC9G,UAAU,EAAE,+GAA+G;KAC5H;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,gGAAgG;QACzG,UAAU,EAAE,gHAAgH;KAC7H;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,+GAA+G;QACxH,UAAU,EAAE,yEAAyE;KACtF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,iEAAiE;QAC1E,UAAU,EAAE,+EAA+E;KAC5F;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,uFAAuF;QAChG,UAAU,EAAE,6EAA6E;KAC1F;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,yEAAyE;QAClF,UAAU,EAAE,uEAAuE;KACpF;IACD;QACE,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,yDAAyD;QAClE,UAAU,EAAE,kEAAkE;KAC/E;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,kCAAkC;QAC3C,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,sDAAsD;KACnE;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,6CAA6C;QACtD,OAAO,EAAE,0DAA0D;QACnE,UAAU,EAAE,sDAAsD;KACnE;IACD;QACE,EAAE,EAAE,cAAc;QAClB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,2DAA2D;QACpE,OAAO,EAAE,2EAA2E;QACpF,UAAU,EAAE,4EAA4E;KACzF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,4EAA4E;QACrF,UAAU,EAAE,sFAAsF;KACnG;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,mEAAmE;QAC5E,OAAO,EAAE,oEAAoE;QAC7E,UAAU,EAAE,4EAA4E;KACzF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,wDAAwD;QACjE,OAAO,EAAE,6EAA6E;QACtF,UAAU,EAAE,8EAA8E;KAC3F;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,8CAA8C;QACvD,OAAO,EAAE,uFAAuF;QAChG,UAAU,EAAE,4FAA4F;KACzG;IACD;QACE,EAAE,EAAE,mCAAmC;QACvC,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,sDAAsD;QAC/D,OAAO,EAAE,4EAA4E;QACrF,UAAU,EAAE,kEAAkE;KAC/E;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,+EAA+E;QACxF,UAAU,EAAE,qEAAqE;KAClF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,gFAAgF;QACzF,UAAU,EAAE,iFAAiF;KAC9F;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,sCAAsC;QAC/C,OAAO,EAAE,6EAA6E;QACtF,UAAU,EAAE,4EAA4E;KACzF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,uFAAuF;QAChG,UAAU,EAAE,kFAAkF;KAC/F;IACD;QACE,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,8DAA8D;QACvE,UAAU,EAAE,0FAA0F;KACvG;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,qCAAqC;QAC9C,OAAO,EAAE,yEAAyE;QAClF,UAAU,EAAE,oFAAoF;KACjG;IACD;QACE,EAAE,EAAE,YAAY;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,sEAAsE;QAC/E,UAAU,EAAE,4DAA4D;KACzE;IACD;QACE,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,gDAAgD;QACzD,OAAO,EAAE,mFAAmF;QAC5F,UAAU,EAAE,sFAAsF;KACnG;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,0EAA0E;QACnF,OAAO,EAAE,uEAAuE;QAChF,UAAU,EAAE,kDAAkD;KAC/D;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,mFAAmF;QAC5F,UAAU,EAAE,gFAAgF;KAC7F;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,qFAAqF;QAC9F,UAAU,EAAE,yFAAyF;KACtG;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,sFAAsF;QAC/F,UAAU,EAAE,+DAA+D;KAC5E;IACD;QACE,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,oBAAoB;QAC7B,OAAO,EAAE,uEAAuE;QAChF,UAAU,EAAE,yEAAyE;KACtF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,uBAAuB;QAChC,OAAO,EAAE,oEAAoE;QAC7E,UAAU,EAAE,yEAAyE;KACtF;IAED,4EAA4E;IAC5E;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE,sFAAsF;QAC/F,UAAU,EAAE,kEAAkE;KAC/E;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,qDAAqD;QAC9D,OAAO,EAAE,iFAAiF;QAC1F,UAAU,EAAE,mDAAmD;KAChE;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,kDAAkD;QAC3D,OAAO,EAAE,uGAAuG;QAChH,UAAU,EAAE,yDAAyD;KACtE;CACF,CAAC;AAEF,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,GAAG;SACP,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAQ,uBAAuB;SACxE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAA0B,gBAAgB;SACnE,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAiB,iBAAiB;SACnE,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAe,wBAAwB;SAC1E,OAAO,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAc,4BAA4B;AACnF,CAAC;AAED,SAAgB,cAAc,CAC5B,SAAiB,EACjB,UAAkB,EAClB,IAAY,EACZ,eAAyB,EAAE;IAE3B,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE5B,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAS;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI;gBACJ,IAAI,EAAE,UAAU;gBAChB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBACnD,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+export interface MigrasafeConfig {
+    ignore?: string[];
+    disableRules?: string[];
+    minSeverity?: "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+}
+export declare function loadConfig(cwd?: string): MigrasafeConfig;

package/dist/config.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const CONFIG_FILES = [".migrasaferc.json", ".migrasaferc", "migrasafe.config.json"];
+function loadConfig(cwd = process.cwd()) {
+    for (const name of CONFIG_FILES) {
+        const filePath = path_1.default.join(cwd, name);
+        if (fs_1.default.existsSync(filePath)) {
+            try {
+                const raw = fs_1.default.readFileSync(filePath, "utf-8").replace(/^/, "");
+                return JSON.parse(raw);
+            }
+            catch {
+                console.error(`Warning: failed to parse config file ${filePath}`);
+            }
+        }
+    }
+    return {};
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;AAWA,gCAaC;AAxBD,4CAAoB;AACpB,gDAAwB;AAQxB,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAEpF,SAAgB,UAAU,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACpD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,wCAAwC,QAAQ,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const checker_1 = require("./checker/checker");
+const formatter_1 = require("./output/formatter");
+const config_1 = require("./config");
+const SEVERITY_ORDER = ["CRITICAL", "HIGH", "MEDIUM", "LOW", "INFO"];
+const program = new commander_1.Command();
+program
+    .name("migrasafe")
+    .description("Detect unsafe SQL migrations before deploying to production")
+    .version("1.0.0");
+program
+    .command("check <target>")
+    .description("Check a SQL file or directory of migrations")
+    .option("--format <format>", "Output format: text or json", "text")
+    .option("--ignore <patterns...>", "Glob/regex patterns to ignore (e.g. --ignore seed_ test_)")
+    .option("--min-severity <level>", "Minimum severity to report: CRITICAL, HIGH, MEDIUM, LOW, INFO", "INFO")
+    .action((target, options) => {
+    const resolved = path_1.default.resolve(target);
+    if (!fs_1.default.existsSync(resolved)) {
+        console.error(`Error: path not found — ${resolved}`);
+        process.exit(1);
+    }
+    // Load config file, then merge CLI flags (CLI takes precedence)
+    const config = (0, config_1.loadConfig)();
+    if (options.ignore)
+        config.ignore = [...(config.ignore ?? []), ...options.ignore];
+    const minSeverity = options.minSeverity.toUpperCase() ?? "INFO";
+    const minIndex = SEVERITY_ORDER.indexOf(minSeverity);
+    let results;
+    try {
+        const stat = fs_1.default.statSync(resolved);
+        const ignorePatterns = (config.ignore ?? []).map((p) => new RegExp(p));
+        const isIgnored = ignorePatterns.some((re) => re.test(resolved));
+        if (isIgnored) {
+            console.log(`Skipped (ignored): ${resolved}`);
+            process.exit(0);
+        }
+        results = stat.isDirectory()
+            ? (0, checker_1.checkDirectory)(resolved, config)
+            : [(0, checker_1.checkFile)(resolved, config)];
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+    }
+    // Filter issues by min severity (always apply — default INFO keeps everything)
+    results = results.map((r) => ({
+        ...r,
+        issues: r.issues.filter((i) => SEVERITY_ORDER.indexOf(i.severity) <= minIndex),
+    }));
+    const scanResult = (0, checker_1.buildScanResult)(results);
+    if (options.format === "json") {
+        console.log((0, formatter_1.formatJson)(scanResult));
+    }
+    else {
+        console.log((0, formatter_1.formatText)(scanResult));
+    }
+    process.exit(scanResult.safe ? 0 : 1);
+});
+program
+    .command("install-hook")
+    .description("Install a pre-commit git hook that runs migrasafe on staged .sql files")
+    .action(() => {
+    const hookDir = path_1.default.join(process.cwd(), ".git", "hooks");
+    const hookPath = path_1.default.join(hookDir, "pre-commit");
+    if (!fs_1.default.existsSync(hookDir)) {
+        console.error("Error: .git/hooks directory not found. Are you in a git repository?");
+        process.exit(1);
+    }
+    const hookScript = `#!/bin/sh
+# migrasafe pre-commit hook
+STAGED_SQL=$(git diff --cached --name-only --diff-filter=ACM | grep '\\.sql$')
+if [ -z "$STAGED_SQL" ]; then
+  exit 0
+fi
+echo "migrasafe: checking staged SQL migrations..."
+echo "$STAGED_SQL" | xargs npx migrasafe check
+`;
+    if (fs_1.default.existsSync(hookPath)) {
+        const existing = fs_1.default.readFileSync(hookPath, "utf-8");
+        if (existing.includes("migrasafe")) {
+            console.log("migrasafe hook already installed.");
+            process.exit(0);
+        }
+        // Append to existing hook
+        fs_1.default.appendFileSync(hookPath, "\n" + hookScript);
+        console.log("✔ migrasafe hook appended to existing pre-commit hook.");
+    }
+    else {
+        fs_1.default.writeFileSync(hookPath, hookScript, { mode: 0o755 });
+        console.log("✔ migrasafe pre-commit hook installed at .git/hooks/pre-commit");
+    }
+});
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AACA,yCAAoC;AACpC,4CAAoB;AACpB,gDAAwB;AACxB,+CAA+E;AAC/E,kDAA4D;AAC5D,qCAAsC;AAGtC,MAAM,cAAc,GAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEjF,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,gBAAgB,CAAC;KACzB,WAAW,CAAC,6CAA6C,CAAC;KAC1D,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,CAAC;KAClE,MAAM,CAAC,wBAAwB,EAAE,2DAA2D,CAAC;KAC7F,MAAM,CACL,wBAAwB,EACxB,+DAA+D,EAC/D,MAAM,CACP;KACA,MAAM,CACL,CACE,MAAc,EACd,OAAmE,EACnE,EAAE;IACF,MAAM,QAAQ,GAAG,cAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAElF,MAAM,WAAW,GAAI,OAAO,CAAC,WAAW,CAAC,WAAW,EAAe,IAAI,MAAM,CAAC;IAC9E,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAErD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE;YAC1B,CAAC,CAAC,IAAA,wBAAc,EAAC,QAAQ,EAAE,MAAM,CAAC;YAClC,CAAC,CAAC,CAAC,IAAA,mBAAS,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+EAA+E;IAC/E,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5B,GAAG,CAAC;QACJ,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,CACtD;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAG,IAAA,yBAAe,EAAC,OAAO,CAAC,CAAC;IAE5C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAA,sBAAU,EAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAA,sBAAU,EAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC,CACF,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CAAC,wEAAwE,CAAC;KACrF,MAAM,CAAC,GAAG,EAAE;IACX,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAElD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG;;;;;;;;CAQtB,CAAC;IAEE,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,0BAA0B;QAC1B,YAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,GAAG,UAAU,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/output/formatter.d.ts

@@ -0,0 +1,3 @@
+import { ScanResult } from "../types";
+export declare function formatText(result: ScanResult): string;
+export declare function formatJson(result: ScanResult): string;

package/dist/output/formatter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.d.ts","sourceRoot":"","sources":["../../src/output/formatter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAY,MAAM,UAAU,CAAC;AAkBhD,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAkDrD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAyBrD"}

package/dist/output/formatter.js

@@ -0,0 +1,91 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatText = formatText;
+exports.formatJson = formatJson;
+const chalk_1 = __importDefault(require("chalk"));
+const path_1 = __importDefault(require("path"));
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+const SEVERITY_COLOR = {
+    CRITICAL: chalk_1.default.bgRed.white.bold,
+    HIGH: chalk_1.default.red.bold,
+    MEDIUM: chalk_1.default.yellow.bold,
+    LOW: chalk_1.default.blue,
+    INFO: chalk_1.default.gray,
+};
+const SEVERITY_ICON = {
+    CRITICAL: "✖ CRITICAL",
+    HIGH: "⚠ HIGH    ",
+    MEDIUM: "● MEDIUM  ",
+    LOW: "○ LOW     ",
+    INFO: "· INFO    ",
+};
+function formatText(result) {
+    const lines = [];
+    const filesScanned = result.results.length;
+    lines.push("");
+    lines.push(chalk_1.default.bold(`Scanning ${filesScanned} file(s)...\n`));
+    let hasIssues = false;
+    for (const fileResult of result.results) {
+        if (fileResult.issues.length === 0)
+            continue;
+        hasIssues = true;
+        lines.push(chalk_1.default.underline(path_1.default.relative(process.cwd(), fileResult.file)));
+        for (const issue of fileResult.issues) {
+            const color = SEVERITY_COLOR[issue.severity];
+            const icon = SEVERITY_ICON[issue.severity];
+            lines.push(`  ${color(icon)}  Line ${issue.line}`);
+            lines.push(`  ${chalk_1.default.dim("Statement:")} ${chalk_1.default.white(issue.statement)}`);
+            lines.push(`  ${chalk_1.default.dim("Problem  :")} ${issue.message}`);
+            if (issue.suggestion) {
+                lines.push(`  ${chalk_1.default.dim("Fix      :")} ${chalk_1.default.cyan(issue.suggestion)}`);
+            }
+            lines.push("");
+        }
+    }
+    if (!hasIssues) {
+        lines.push(chalk_1.default.green("✔ All migrations are safe — no issues found.\n"));
+    }
+    lines.push(chalk_1.default.bold("── Summary ──────────────────────────────"));
+    if (result.criticalCount > 0)
+        lines.push(SEVERITY_COLOR.CRITICAL(`  CRITICAL : ${result.criticalCount}`));
+    if (result.highCount > 0)
+        lines.push(SEVERITY_COLOR.HIGH(`  HIGH     : ${result.highCount}`));
+    if (result.mediumCount > 0)
+        lines.push(SEVERITY_COLOR.MEDIUM(`  MEDIUM   : ${result.mediumCount}`));
+    lines.push(`  Total    : ${result.totalIssues} issue(s) across ${filesScanned} file(s)`);
+    lines.push("");
+    if (result.safe) {
+        lines.push(chalk_1.default.green.bold("✔ SAFE — ready to deploy to production"));
+    }
+    else {
+        lines.push(chalk_1.default.red.bold("✖ UNSAFE — resolve all CRITICAL/HIGH issues before deploying"));
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+function formatJson(result) {
+    return JSON.stringify({
+        safe: result.safe,
+        summary: {
+            critical: result.criticalCount,
+            high: result.highCount,
+            medium: result.mediumCount,
+            total: result.totalIssues,
+        },
+        files: result.results.map((r) => ({
+            file: r.file,
+            issueCount: r.issues.length,
+            issues: r.issues.map((i) => ({
+                severity: i.severity,
+                line: i.line,
+                statement: i.statement,
+                message: i.message,
+                suggestion: i.suggestion,
+            })),
+        })),
+    }, null, 2);
+}
+//# sourceMappingURL=formatter.js.map

package/dist/output/formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatter.js","sourceRoot":"","sources":["../../src/output/formatter.ts"],"names":[],"mappings":";;;;;AAqBA,gCAkDC;AAED,gCAyBC;AAlGD,kDAA0B;AAC1B,gDAAwB;AAGxB,8DAA8D;AAC9D,MAAM,cAAc,GAA0B;IAC5C,QAAQ,EAAE,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI;IAChC,IAAI,EAAE,eAAK,CAAC,GAAG,CAAC,IAAI;IACpB,MAAM,EAAE,eAAK,CAAC,MAAM,CAAC,IAAI;IACzB,GAAG,EAAE,eAAK,CAAC,IAAI;IACf,IAAI,EAAE,eAAK,CAAC,IAAI;CACjB,CAAC;AAEF,MAAM,aAAa,GAA6B;IAC9C,QAAQ,EAAE,YAAY;IACtB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;CACnB,CAAC;AAEF,SAAgB,UAAU,CAAC,MAAkB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAE3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,YAAY,eAAe,CAAC,CAAC,CAAC;IAEhE,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC7C,SAAS,GAAG,IAAI,CAAC;QAEjB,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,SAAS,CAAC,cAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE3E,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5D,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,KAAK,eAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,eAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,WAAW,oBAAoB,YAAY,UAAU,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,UAAU,CAAC,MAAkB;IAC3C,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC,aAAa;YAC9B,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,KAAK,EAAE,MAAM,CAAC,WAAW;SAC1B;QACD,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;YAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,21 @@
+export type Severity = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+export interface Issue {
+    severity: Severity;
+    file: string;
+    line: number;
+    statement: string;
+    message: string;
+    suggestion?: string | undefined;
+}
+export interface CheckResult {
+    file: string;
+    issues: Issue[];
+}
+export interface ScanResult {
+    results: CheckResult[];
+    totalIssues: number;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    safe: boolean;
+}

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,KAAK;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;CACf"}

package/dist/types/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "migrasafe",
+  "version": "1.0.0",
+  "description": "Detect unsafe SQL migrations before deploying to production",
+  "main": "dist/index.js",
+  "bin": {
+    "migrasafe": "./dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": ["sql", "migration", "database", "safety", "cli", "devops", "postgresql", "flyway", "liquibase"],
+  "author": {
+    "name": "febrifelis",
+    "url": "https://github.com/febrifelis"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/febrifelis/migrasafe.git"
+  },
+  "homepage": "https://github.com/febrifelis/migrasafe#readme",
+  "bugs": {
+    "url": "https://github.com/febrifelis/migrasafe/issues"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "type": "commonjs",
+  "devDependencies": {
+    "@types/node": "^26.0.1",
+    "tsx": "^4.22.4",
+    "typescript": "^6.0.3"
+  },
+  "dependencies": {
+    "chalk": "^5.6.2",
+    "commander": "^15.0.0"
+  }
+}