damage-control-dev 0.1.0__py3-none-any.whl

damage_control/rules/core.yaml

@@ -0,0 +1,441 @@
+# Core damage control rules
+# File system ops, path protections, process ops, history
+
+bashToolPatterns:
+  # ---------------------------------------------------------------------------
+  # DESTRUCTIVE FILE OPERATIONS
+  # ---------------------------------------------------------------------------
+  # {ARGS} (#1125): the flag may follow any operand (`rm foo -rf x`), up to `--`.
+  - id: core.rm-with-recursive-or-force-flags
+    pattern: '\brm\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?-(?!-)[a-z]*[rf][a-z]*(?=[\s;&|)`]|$)'
+    pattern_src: '\brm\s+{ARGS}-(?!-)[a-z]*[rf][a-z]*(?=[\s;&|)`]|$)'
+    reason: rm with recursive or force flags
+    anchored: true
+
+  - id: core.rm-with-recursive-flag
+    pattern: '\brm\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?--recursive'
+    pattern_src: '\brm\s+{ARGS}--recursive'
+    reason: rm with --recursive flag
+    anchored: true
+
+  - id: core.rm-with-force-flag
+    pattern: '\brm\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?--force'
+    pattern_src: '\brm\s+{ARGS}--force'
+    reason: rm with --force flag
+    anchored: true
+
+  - id: core.sudo-rm
+    pattern: '\bsudo\s+rm\b'
+    reason: sudo rm
+    anchored: true
+
+  - id: core.rmdir-use-git-clean-or-manual-cleanup
+    pattern: '\brmdir\b'
+    reason: rmdir (use git clean or manual cleanup)
+    bypassable: true
+    anchored: true
+
+  - id: core.rm-file-deletion-use-git-clean-or-manual-cleanup
+    pattern: '\brm\s+[^-]'
+    reason: rm file deletion (use git clean or manual cleanup)
+    bypassable: true
+    anchored: true
+
+  - id: core.trash-command-moves-files-to-trash-use-git-clean-or-manual-c
+    pattern: '(?:^|[;&|])\s*trash\s+'
+    reason: trash command (moves files to trash - use git clean or manual cleanup)
+    bypassable: true
+    anchored: true
+
+  # Non-``rm`` deletion paths that the literal-``rm`` rules miss.
+  - id: core.find-delete-recursive-deletion-use-git-clean-or-manual-clean
+    pattern: '\bfind\b.*\s-delete\b'
+    reason: find -delete (recursive deletion - use git clean or manual cleanup)
+    bypassable: true
+    anchored: true
+
+  - id: core.find-exec-chmod-777-world-writable
+    pattern: '\bfind\b.*-(?:exec|execdir|ok|okdir)\s+(?:\S*/)?chmod\s+(?:-[^\s;&|]*\s+)*(?:--\s+)?0?777\b'
+    reason: find -exec chmod 777 (world writable)
+    anchored: true
+
+  - id: core.find-exec-rm-deletion-via-find-use-git-clean-or-manual-clean
+    pattern: '\bfind\b.*-exec\s+rm\b'
+    reason: find -exec rm (deletion via find - use git clean or manual cleanup)
+    bypassable: true
+    anchored: true
+
+  # ---------------------------------------------------------------------------
+  # PERMISSION CHANGES
+  # ---------------------------------------------------------------------------
+  # The mode is the first non-flag operand: in `chmod u+x 777` the 777 is a
+  # FILE (#1133). Only option tokens (`-R`, `-v`, `--reference=…`) may precede it.
+  - id: core.chmod-777-world-writable
+    pattern: '\bchmod\s+(?:-[^\s;&|]*\s+)*(?:--\s+)?0?777\b'
+    reason: chmod 777 (world writable)
+    anchored: true
+
+  # Recursive stays wide on purpose: with `-R`, an unreadable mode token
+  # (`chmod -R ${m:-x} 777 /`) must not hide a world-writable tree, so 777
+  # ANYWHERE refuses. Price: `chmod -R u+x 777` (a file named 777) still blocks.
+  - id: core.recursive-chmod-777
+    pattern: '\bchmod\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?(?:-(?!-)[a-z]*r[a-z]*|--recursive)(?=[\s;&|)`]|$).*777'
+    pattern_src: '\bchmod\s+{ARGS}(?:-(?!-)[a-z]*r[a-z]*|--recursive)(?=[\s;&|)`]|$).*777'
+    reason: recursive chmod 777
+    anchored: true
+
+  - id: core.recursive-chown-to-root
+    pattern: '\bchown\s+(?=[^;&|]*\broot\b)(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?(?:-(?!-)[a-z]*r[a-z]*|--recursive)(?=[\s;&|)`]|$)'
+    pattern_src: '\bchown\s+(?=[^;&|]*\broot\b){ARGS}(?:-(?!-)[a-z]*r[a-z]*|--recursive)(?=[\s;&|)`]|$)'
+    reason: recursive chown to root
+    anchored: true
+
+  # ---------------------------------------------------------------------------
+  # SYSTEM-LEVEL DESTRUCTION
+  # ---------------------------------------------------------------------------
+  - id: core.filesystem-format-command
+    pattern: '\bmkfs\.'
+    reason: filesystem format command
+    anchored: true
+
+  - id: core.dd-writing-to-device
+    pattern: '\bdd\s+.*of=/dev/'
+    reason: dd writing to device
+    anchored: true
+
+  # ---------------------------------------------------------------------------
+  # PROCESS DESTRUCTION
+  # ---------------------------------------------------------------------------
+  # `-1` is the all-processes TARGET (pid -1), not SIGHUP, whenever a signal
+  # option accompanies it, in either order (`kill -1 -9`, `kill -s KILL -1`,
+  # `kill -TERM -- -1`). `kill -1 123` (HUP to one pid) stays allowed (#1133).
+  # `-1` anywhere but the FIRST operand is a pid: bash parses options only up
+  # front, so `kill --signal TERM -1`, `kill -s KILL 1 -1`, `kill 123 -1` all
+  # signal every process. (As the first operand it is SIGHUP: `kill -1 123`.)
+  - id: core.kill-all-processes
+    pattern: '\bkill\s+(?:[^\s;&|]+\s+)+-1(?=[\s;&|)`]|$)'
+    reason: kill all processes
+    anchored: true
+
+  # `kill -1 -9`: -1 first, then another option.
+  - id: core.kill-all-processes-2
+    pattern: '\bkill\s+-1(?=\s)[^;&|]*?\s-[A-Za-z0-9]'
+    reason: kill all processes
+    anchored: true
+
+  # SIGKILL cannot be handled or cleaned up after; rephrase to a plain `kill`
+  # (SIGTERM) first. Ask, not block: it is a legitimate last resort.
+  - id: core.kill-sigkill
+    pattern: '\bkill\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?(?:-(?:9|KILL|SIGKILL)|-s\s*(?:9|KILL|SIGKILL)|-n\s+9|--signal[=\s]\s*(?:9|KILL|SIGKILL))(?=[\s;&|)`]|$)'
+    pattern_src: '\bkill\s+{ARGS}(?:-(?:9|KILL|SIGKILL)|-s\s*(?:9|KILL|SIGKILL)|-n\s+9|--signal[=\s]\s*(?:9|KILL|SIGKILL))(?=[\s;&|)`]|$)'
+    reason: kill -9 (SIGKILL, no cleanup; use a plain kill first)
+    ask: true
+    anchored: true
+
+  # Deferred execution: the crontab body runs later, unobserved, and a file or
+  # stdin payload is unreadable here. Only listing (`-l`, `-lu me`, `--list`) and `-V` are read-only.
+  - id: core.crontab-install
+    pattern: '(?<![\w.-])(?<!\./)crontab(?=[\s;&|)`]|$)(?![^;&|]*\s(?:-[A-Za-z]*l[A-Za-z]*|--list|-V|--version)(?=[\s;&|)`]|$))'
+    reason: crontab installs or edits scheduled commands
+    ask: true
+    anchored: true
+
+  # `--delete*` removes destination files; `--remove-source-files` removes the
+  # SOURCE after transfer. `--no-delete` and `--max-delete` do not match.
+  - id: core.rsync-delete
+    pattern: '\brsync\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?--(?:del|delete[a-z-]*|remove-(?:source|sent)-files)(?=[\s=;&|)`]|$)'
+    pattern_src: '\brsync\s+{ARGS}--(?:del|delete[a-z-]*|remove-(?:source|sent)-files)(?=[\s=;&|)`]|$)'
+    reason: rsync deletes files (--delete*, --remove-source-files)
+    ask: true
+    anchored: true
+
+  - id: core.killall-9
+    pattern: '\bkillall\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?-9\b'
+    pattern_src: '\bkillall\s+{ARGS}-9\b'
+    reason: killall -9
+    anchored: true
+
+  - id: core.pkill-9
+    pattern: '\bpkill\s+(?:(?!--(?:\s|$))[^\s;&|]+\s+)*?-9\b'
+    pattern_src: '\bpkill\s+{ARGS}-9\b'
+    reason: pkill -9
+    anchored: true
+
+  # ---------------------------------------------------------------------------
+  # HISTORY/SHELL MANIPULATION
+  # ---------------------------------------------------------------------------
+  - id: core.clearing-shell-history
+    pattern: '\bhistory\s+-c\b'
+    reason: clearing shell history
+    anchored: true
+
+# ---------------------------------------------------------------------------
+# ZERO ACCESS PATHS - No read, write, or any access allowed
+#
+# Enforced across shell (Bash hook), file edits/writes (Edit/Write hooks) AND
+# native content reads (Read/Grep/Glob hook → check_read_path). Template files
+# (.env.example/.sample/.template/.dist) are carved out as secret-free.
+# ---------------------------------------------------------------------------
+zeroAccessPaths:
+  # ---------------------------------------------------------------------------
+  # ENVIRONMENT FILES (HIGH RISK - contain secrets)
+  # ---------------------------------------------------------------------------
+  - ".env"
+  - ".env.*"
+  - ".env*.local"
+  - "*.env"
+
+  # ---------------------------------------------------------------------------
+  # SSH KEYS AND CONFIG
+  # ---------------------------------------------------------------------------
+  - "~/.ssh/"
+
+  # ---------------------------------------------------------------------------
+  # GPG KEYS
+  # ---------------------------------------------------------------------------
+  - "~/.gnupg/"
+
+  # ---------------------------------------------------------------------------
+  # CLOUD PROVIDER CREDENTIALS
+  # ---------------------------------------------------------------------------
+  # AWS
+  - "~/.aws/"
+
+  # GCP
+  - "~/.config/gcloud/"
+  - "*-credentials.json"
+  - "*serviceAccount*.json"
+  - "*service-account*.json"
+
+  # Azure
+  - "~/.azure/"
+
+  # Kubernetes
+  - "~/.kube/"
+  - "kubeconfig"
+  - "*-secret.yaml"
+  - "secrets.yaml"
+
+  # Docker
+  - "~/.docker/"
+
+  # ---------------------------------------------------------------------------
+  # SSL/TLS CERTIFICATES AND PRIVATE KEYS
+  # ---------------------------------------------------------------------------
+  - "*.pem"
+  - "*.key"
+  - "*.p12"
+  - "*.pfx"
+
+  # ---------------------------------------------------------------------------
+  # TERRAFORM STATE (contains secrets in plaintext!)
+  # ---------------------------------------------------------------------------
+  - "*.tfstate"
+  - "*.tfstate.backup"
+  - ".terraform/"
+
+  # ---------------------------------------------------------------------------
+  # PLATFORM TOKENS (Vercel, Netlify, etc.)
+  # ---------------------------------------------------------------------------
+  - ".vercel/"
+  - ".netlify/"
+
+  # ---------------------------------------------------------------------------
+  # FIREBASE/SUPABASE
+  # ---------------------------------------------------------------------------
+  - "firebase-adminsdk*.json"
+  - "serviceAccountKey.json"
+  - ".supabase/"
+
+  # ---------------------------------------------------------------------------
+  # PACKAGE MANAGER AUTH & CREDENTIALS
+  # ---------------------------------------------------------------------------
+  - "~/.netrc"
+  - "~/.npmrc"
+  - "~/.pypirc"
+  - "~/.git-credentials"
+  - ".git-credentials"
+
+  # ---------------------------------------------------------------------------
+  # DATABASE DUMPS (may contain production data)
+  # ---------------------------------------------------------------------------
+  - "dump.sql"
+  - "backup.sql"
+  - "*.dump"
+
+
+# ---------------------------------------------------------------------------
+# READ-ONLY PATHS - Can read, but not write/edit/delete
+# ---------------------------------------------------------------------------
+readOnlyPaths:
+  # ---------------------------------------------------------------------------
+  # SYSTEM DIRECTORIES
+  # ---------------------------------------------------------------------------
+  - /etc/
+  - /usr/
+  - /bin/
+  - /sbin/
+  - /boot/
+  - /root/
+
+  # ---------------------------------------------------------------------------
+  # SHELL HISTORY FILES
+  # ---------------------------------------------------------------------------
+  - ~/.bash_history
+  - ~/.zsh_history
+  - ~/.node_repl_history
+
+  # ---------------------------------------------------------------------------
+  # SHELL CONFIG FILES
+  # ---------------------------------------------------------------------------
+  - ~/.bashrc
+  - ~/.zshrc
+  - ~/.profile
+  - ~/.bash_profile
+
+  # ---------------------------------------------------------------------------
+  # LOCK FILES - Never manually edit, use package managers
+  # ---------------------------------------------------------------------------
+  - "package-lock.json"
+  - "yarn.lock"
+  - "pnpm-lock.yaml"
+  - "Gemfile.lock"
+  - "poetry.lock"
+  - "Pipfile.lock"
+  - "composer.lock"
+  - "Cargo.lock"
+  - "go.sum"
+  - "flake.lock"
+  - "bun.lockb"
+  - "uv.lock"
+  - "npm-shrinkwrap.json"
+  - "*.lock"
+  - "*.lockb"
+
+  # ---------------------------------------------------------------------------
+  # MINIFIED/COMPILED FILES - Generated, don't edit
+  # ---------------------------------------------------------------------------
+  - "*.min.js"
+  - "*.min.css"
+  - "*.bundle.js"
+  - "*.chunk.js"
+
+  # ---------------------------------------------------------------------------
+  # BUILD ARTIFACTS - Generated directories, don't edit
+  # ---------------------------------------------------------------------------
+  - dist/
+  - build/
+  - out/
+  - .next/
+  - .nuxt/
+  - .output/
+  - node_modules/
+  - __pycache__/
+  - .venv/
+  - venv/
+  - target/
+
+# ---------------------------------------------------------------------------
+# NO-DELETE PATHS - Can read/write/edit, but not delete
+# ---------------------------------------------------------------------------
+noDeletePaths:
+  # ---------------------------------------------------------------------------
+  # CLAUDE CODE CONFIGURATION
+  # ---------------------------------------------------------------------------
+  - ~/.claude/
+  - CLAUDE.md
+
+  # ---------------------------------------------------------------------------
+  # LICENSE AND LEGAL FILES
+  # ---------------------------------------------------------------------------
+  - "LICENSE"
+  - "LICENSE.*"
+  - "COPYING"
+  - "COPYING.*"
+  - "NOTICE"
+  - "PATENTS"
+
+  # ---------------------------------------------------------------------------
+  # PROJECT DOCUMENTATION
+  # ---------------------------------------------------------------------------
+  - "README.md"
+  - "README.*"
+  - "CONTRIBUTING.md"
+  - "CHANGELOG.md"
+  - "CODE_OF_CONDUCT.md"
+  - "SECURITY.md"
+
+  # ---------------------------------------------------------------------------
+  # GIT DIRECTORY
+  # ---------------------------------------------------------------------------
+  - .git/
+  - .gitignore
+  - .gitattributes
+  - .gitmodules
+
+  # ---------------------------------------------------------------------------
+  # CI/CD CONFIGURATION
+  # ---------------------------------------------------------------------------
+  - .github/
+  - .gitlab-ci.yml
+  - .circleci/
+  - Jenkinsfile
+  - .travis.yml
+  - azure-pipelines.yml
+
+  # ---------------------------------------------------------------------------
+  # DOCKER CONFIGURATION
+  # ---------------------------------------------------------------------------
+  - Dockerfile
+  - "Dockerfile.*"
+  - docker-compose.yml
+  - "docker-compose.*.yml"
+  - .dockerignore
+
+# ---------------------------------------------------------------------------
+# ALLOWED PATHS - Granular bypass for path-based protections
+# ---------------------------------------------------------------------------
+allowedPaths:
+  # ---------------------------------------------------------------------------
+  # BUILD ARTIFACTS - Safe to delete/modify (regenerated by build tools)
+  # ---------------------------------------------------------------------------
+  - path: "*/dist/*"
+    allow: all
+  - path: "*/build/*"
+    allow: all
+  - path: "*/out/*"
+    allow: all
+  - path: "*/.next/*"
+    allow: all
+  - path: "*/.nuxt/*"
+    allow: all
+  - path: "*/.output/*"
+    allow: all
+
+  # ---------------------------------------------------------------------------
+  # PYTHON CACHES - Safe to delete/modify
+  # ---------------------------------------------------------------------------
+  - path: "*/__pycache__/*"
+    allow: all
+  - path: "*/.eggs/*"
+    allow: all
+  - path: "*.egg-info/*"
+    allow: all
+  - path: "*/.pytest_cache/*"
+    allow: all
+  - path: "*/.mypy_cache/*"
+    allow: all
+  - path: "*/.ruff_cache/*"
+    allow: all
+
+  # ---------------------------------------------------------------------------
+  # TEMP DIRECTORIES - Safe to delete/modify
+  # ---------------------------------------------------------------------------
+  - path: "/tmp/*"
+    allow: all
+  - path: "/var/tmp/*"
+    allow: all
+
+  # ---------------------------------------------------------------------------
+  # PROJECT-SPECIFIC ENV FILES - Needed for tokens/config (read/write/edit only)
+  # ---------------------------------------------------------------------------

damage_control/rules/databases.json

@@ -0,0 +1,117 @@
+{
+ "bashToolPatterns": [
+  {
+   "id": "databases.redis-cli-flushall-wipes-all-data",
+   "pattern": "\\bredis-cli\\s+FLUSHALL",
+   "reason": "redis-cli FLUSHALL (wipes ALL data)",
+   "anchored": true
+  },
+  {
+   "id": "databases.redis-cli-flushdb-wipes-database",
+   "pattern": "\\bredis-cli\\s+FLUSHDB",
+   "reason": "redis-cli FLUSHDB (wipes database)",
+   "anchored": true
+  },
+  {
+   "id": "databases.postgresql-dropdb",
+   "pattern": "\\bdropdb\\b",
+   "reason": "PostgreSQL dropdb",
+   "anchored": true
+  },
+  {
+   "id": "databases.mysql-drop-database",
+   "pattern": "\\bmysqladmin\\s+drop\\b",
+   "reason": "MySQL drop database",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bprisma\\s+migrate\\s+reset\\b",
+   "reason": "prisma migrate reset (drops the database and re-applies migrations)",
+   "id": "db.prisma-reset",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bflyway\\s+clean\\b",
+   "reason": "flyway clean (drops all objects in the schema)",
+   "id": "db.flyway-clean",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bprisma\\s+migrate\\s+(deploy|dev)\\b",
+   "reason": "prisma migrate (applies database migrations)",
+   "ask": true,
+   "id": "db.prisma-migrate",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bprisma\\s+db\\s+push\\b",
+   "reason": "prisma db push (pushes schema changes to the database)",
+   "ask": true,
+   "id": "db.prisma-db-push",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bsupabase\\s+db\\s+push\\b",
+   "reason": "supabase db push (applies local migrations to the linked database)",
+   "ask": true,
+   "id": "db.supabase-db-push",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bsupabase\\s+migration\\s+up\\b",
+   "reason": "supabase migration up (applies pending migrations)",
+   "ask": true,
+   "id": "db.supabase-migration-up",
+   "anchored": true
+  },
+  {
+   "pattern": "\\balembic\\s+(upgrade|downgrade)\\b",
+   "reason": "alembic upgrade/downgrade (applies/reverts SQLAlchemy migrations)",
+   "ask": true,
+   "id": "db.alembic",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bmanage\\.py\\s+migrate\\b",
+   "reason": "Django manage.py migrate (applies database migrations)",
+   "ask": true,
+   "id": "db.django-migrate",
+   "anchored": true
+  },
+  {
+   "pattern": "\\b(rails|rake)\\s+db:migrate\\b",
+   "reason": "rails db:migrate (applies ActiveRecord migrations)",
+   "ask": true,
+   "id": "db.rails-migrate",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bknex\\s+migrate:(latest|up|down|rollback)\\b",
+   "reason": "knex migrate (applies/reverts Knex migrations)",
+   "ask": true,
+   "id": "db.knex-migrate",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bsequelize\\s+db:migrate\\b",
+   "reason": "sequelize db:migrate (applies Sequelize migrations)",
+   "ask": true,
+   "id": "db.sequelize-migrate",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bflyway\\s+migrate\\b",
+   "reason": "flyway migrate (applies pending migrations)",
+   "ask": true,
+   "id": "db.flyway-migrate",
+   "anchored": true
+  },
+  {
+   "pattern": "\\bliquibase\\s+update\\b",
+   "reason": "liquibase update (applies pending changesets)",
+   "ask": true,
+   "id": "db.liquibase-update",
+   "anchored": true
+  }
+ ]
+}

damage_control/rules/databases.yaml

@@ -0,0 +1,123 @@
+# Database damage control rules
+# Database CLIs and SQL
+
+bashToolPatterns:
+  # ---------------------------------------------------------------------------
+  # DATABASE CLI DESTRUCTIVE OPERATIONS
+  # ---------------------------------------------------------------------------
+  - id: databases.redis-cli-flushall-wipes-all-data
+    pattern: '\bredis-cli\s+FLUSHALL'
+    reason: redis-cli FLUSHALL (wipes ALL data)
+    anchored: true
+
+  - id: databases.redis-cli-flushdb-wipes-database
+    pattern: '\bredis-cli\s+FLUSHDB'
+    reason: redis-cli FLUSHDB (wipes database)
+    anchored: true
+
+  - id: databases.postgresql-dropdb
+    pattern: '\bdropdb\b'
+    reason: PostgreSQL dropdb
+    anchored: true
+
+  - id: databases.mysql-drop-database
+    pattern: '\bmysqladmin\s+drop\b'
+    reason: MySQL drop database
+    anchored: true
+
+  # Migration tools that DROP/recreate the schema (data loss) — hard block.
+  - pattern: '\bprisma\s+migrate\s+reset\b'
+    reason: prisma migrate reset (drops the database and re-applies migrations)
+    id: db.prisma-reset
+    anchored: true
+
+  - pattern: '\bflyway\s+clean\b'
+    reason: flyway clean (drops all objects in the schema)
+    id: db.flyway-clean
+    anchored: true
+
+  # NOTE: the raw SQL statement rules (DROP TABLE / TRUNCATE / DELETE-without-
+  # WHERE) and the psql/mysql/mongosh raw-write rules used to live here. They
+  # moved to payloads.yaml (#915) — they match text inside a client's quoted
+  # payload, which is the shape that cannot be anchored, and this file is
+  # uniformly anchored.
+
+  # ---------------------------------------------------------------------------
+  # SCHEMA MIGRATIONS (ask: true — apply DDL/DML to a database)
+  # ---------------------------------------------------------------------------
+  # A migration mutates a real database and is rarely cleanly reversible. These
+  # were previously `allow`-tier, so a scheduled agent could migrate prod
+  # silently. Classify them `ask`. The schema-dropping variants (prisma migrate
+  # reset, flyway clean) are hard-blocked above. `\b` before each tool name lets
+  # the pattern match through `npx`/`python -m`/`bundle exec` prefixes.
+  - pattern: '\bprisma\s+migrate\s+(deploy|dev)\b'
+    reason: prisma migrate (applies database migrations)
+    ask: true
+    id: db.prisma-migrate
+    anchored: true
+
+  - pattern: '\bprisma\s+db\s+push\b'
+    reason: prisma db push (pushes schema changes to the database)
+    ask: true
+    id: db.prisma-db-push
+    anchored: true
+
+  - pattern: '\bsupabase\s+db\s+push\b'
+    reason: supabase db push (applies local migrations to the linked database)
+    ask: true
+    id: db.supabase-db-push
+    anchored: true
+
+  - pattern: '\bsupabase\s+migration\s+up\b'
+    reason: supabase migration up (applies pending migrations)
+    ask: true
+    id: db.supabase-migration-up
+    anchored: true
+
+  - pattern: '\balembic\s+(upgrade|downgrade)\b'
+    reason: alembic upgrade/downgrade (applies/reverts SQLAlchemy migrations)
+    ask: true
+    id: db.alembic
+    anchored: true
+
+  - pattern: '\bmanage\.py\s+migrate\b'
+    reason: Django manage.py migrate (applies database migrations)
+    ask: true
+    id: db.django-migrate
+    anchored: true
+
+  - pattern: '\b(rails|rake)\s+db:migrate\b'
+    reason: rails db:migrate (applies ActiveRecord migrations)
+    ask: true
+    id: db.rails-migrate
+    anchored: true
+
+  - pattern: '\bknex\s+migrate:(latest|up|down|rollback)\b'
+    reason: knex migrate (applies/reverts Knex migrations)
+    ask: true
+    id: db.knex-migrate
+    anchored: true
+
+  - pattern: '\bsequelize\s+db:migrate\b'
+    reason: sequelize db:migrate (applies Sequelize migrations)
+    ask: true
+    id: db.sequelize-migrate
+    anchored: true
+
+  - pattern: '\bflyway\s+migrate\b'
+    reason: flyway migrate (applies pending migrations)
+    ask: true
+    id: db.flyway-migrate
+    anchored: true
+
+  - pattern: '\bliquibase\s+update\b'
+    reason: liquibase update (applies pending changesets)
+    ask: true
+    id: db.liquibase-update
+    anchored: true
+
+  # Raw DML/DDL via DB clients (psql/mysql/mongosh write statements) and the
+  # catastrophic statement rules both live in payloads.yaml now — see the note
+  # above. The residual gap they carry (file-fed scripts: `psql -f`,
+  # `mysql < file`, which a regex cannot introspect) is documented there and in
+  # the wiki coverage matrix.