Lint rules: schema markers and write policy

// bad: compiles, does nothing
message Order {
  // forge:server-set
  string cursor = 2;
}

⚠ proto/services/order/v1/order.proto:26 [forge-proto-markers] removed forge:* proto marker "forge:server-set" (renamed to "forge:read-only")
   → "forge:server-set" was renamed to "forge:read-only" and is no longer recognized — this comment currently does NOTHING (the field stays client-writable). Rewrite it as "forge:read-only".

-- bad: misspelled, and silently inert
COMMENT ON COLUMN orders.customer IS 'forge:immutible';

-- fix
COMMENT ON COLUMN orders.customer IS 'forge:immutable';

// bad: em-dash, not a colon
//forge:exclude-contract — adapter, no contract wanted

// bad: a typo
//forge:exclude-contrat: adapter

// fix
//forge:exclude-contract: adapter, no contract wanted

CHECK (scope IN ('read', 'write'))
COMMENT ON CONSTRAINT access_tokens_scopes ON access_tokens IS 'forge:closed-set accesstoken.AllScopes';

-- bad: access_token is credential-shaped and undecided
CREATE TABLE git_credentials (id TEXT PRIMARY KEY, access_token TEXT NOT NULL);

-- fix: decide, where the column lives
COMMENT ON COLUMN git_credentials.access_token IS 'forge:secret';
COMMENT ON COLUMN usage_events.token_hash IS 'forge:readable — hash of the prompt, not a credential';

// bad: total_cents is read-only, and no handler sets it
message Order {
  // forge:read-only
  int64 total_cents = 4;
}

ALTER TABLE orders ADD COLUMN total_cents BIGINT
  GENERATED ALWAYS AS (qty * unit_cents) STORED NOT NULL;

// bad
message Lead   { optional string source_lead_id = 3; }
message CreateLeadRequest { string source_lead_id = 3; }   // label lost

// fix
message CreateLeadRequest { optional string source_lead_id = 3; }

-- bad
SELECT date_trunc('day', created_at) AS day, count(*) FROM orders GROUP BY 1;

-- fix: pin the zone
SELECT date_trunc('day', created_at, 'UTC') AS day, count(*) FROM orders GROUP BY 1;