Postgres parser: refuse deep nesting instead of exhausting the stack

Cargo.toml

@@ -14,7 +14,11 @@ members = [
     "crates/sqlquack-polyglot-check",
     "crates/sqlquack-syntax-coverage",
     "crates/sqlquack-syntax-postgres",
+    "crates/sqlquack-format",
+    "crates/sqlquack-format-check",
+    "crates/sqlquack-lint",
     "crates/sqlquack-syntax-bigquery",
+    "crates/sqlquack-fingerprint",
     "crates/sqlquack-python",
 ]
 exclude = ["fuzz"]
@@ -48,6 +52,7 @@ polyglot-sql = { git = "https://github.com/sqlstack-io/polyglot.git", rev = "7d5
 proc-macro2 = "1"
 quote = "1"
 rayon = "1"
+rustc-hash = "2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 # The Python module; abi3, so one build loads into every CPython from 3.12.
@@ -58,6 +63,9 @@ sqlquack-compare = { path = "crates/sqlquack-compare" }
 sqlquack-core = { path = "crates/sqlquack-core" }
 sqlquack-duckdb = { path = "crates/sqlquack-duckdb", default-features = false }
 sqlquack-evidence = { path = "crates/sqlquack-evidence" }
+sqlquack-format = { path = "crates/sqlquack-format" }
+sqlquack-fingerprint = { path = "crates/sqlquack-fingerprint" }
+sqlquack-lint = { path = "crates/sqlquack-lint" }
 sqlquack-policy = { path = "crates/sqlquack-policy" }
 sqlquack-rules = { path = "crates/sqlquack-rules" }
 sqlquack-semantics = { path = "crates/sqlquack-semantics" }

Makefile

@@ -30,7 +30,7 @@ PYTHON_TYPED := scripts tests/unit/scripts python/src $(PYTHON_API_TESTS)
 PYTHON_TESTS := tests/unit/scripts $(PYTHON_API_TESTS)
 endif
 
-.PHONY: format rust-lint python-check fensu syntax-coverage gate-build evidence-guard polyglot-guard generate-cases generated-cases generate-syntax-cases syntax-cases corpus-rerecord generate-referee-cases referee-cases referee-pending translation-results check-ci check-merge test test-rust test-python python-module python-api python-wheel verify-recorded polyglot-duckshop census-duckshop fuzz-smoke gate gate-parallel census duckshop-compiled duckshop-measure
+.PHONY: format rust-lint python-check fensu syntax-coverage depth-probe depth-probe-debug gate-build evidence-guard polyglot-guard generate-cases generated-cases generate-syntax-cases syntax-cases corpus-rerecord generate-referee-cases referee-cases referee-pending translation-results check-ci check-merge test test-rust test-python python-module python-api python-wheel verify-recorded polyglot-duckshop census-duckshop fuzz-smoke gate gate-parallel census duckshop-compiled duckshop-measure
 
 format:
 	cargo fmt --all
@@ -62,6 +62,16 @@ fensu:
 syntax-coverage: gate-build
 	$(GATE_DIR)/syntax-coverage diff coverage/syntax/baseline.json
 
+# Fails when a native parser crashes, panics or hangs on deeply nested SQL on a 2 MiB thread and
+# coverage/deep-nesting.toml does not list it, or when a listed failure no longer happens.
+depth-probe: gate-build
+	$(GATE_DIR)/syntax-coverage depth-probe --profile $(GATE_PROFILE)
+
+# The same probe on a debug build, whose larger frames fail at shallower depths; not in check-ci.
+depth-probe-debug:
+	cargo build --locked -p sqlquack-syntax-coverage --bin syntax-coverage
+	$(or $(CARGO_TARGET_DIR),target)/debug/syntax-coverage depth-probe --profile dev
+
 # Fails when a change modifies or deletes a recorded result, or adds an invalid one.
 evidence-guard:
 	uv run python -m scripts.check_evidence_append_only --base $(EVIDENCE_BASE)
@@ -109,7 +119,7 @@ referee-pending:
 	uv run python -m scripts.write_referee_pending $(REFEREE_ARGS)
 
 # The static gate, the first step of `gate`, and the Python API's tests.
-check-ci: rust-lint python-check fensu syntax-coverage evidence-guard polyglot-guard generated-cases syntax-cases referee-cases python-api
+check-ci: rust-lint python-check fensu syntax-coverage depth-probe evidence-guard polyglot-guard generated-cases syntax-cases referee-cases python-api
 
 # The gate builds everything it runs once, in `gate-build`: one profile, GATE_PROFILE (Cargo.toml's
 # `gate`), and one feature set, GATE_FEATURES. Cargo unifies features per invocation, so a build of a

THIRD_PARTY_NOTICES

@@ -22,6 +22,11 @@ The referee corpus referee/corpora/sqlglot.json holds the query statements passe
 `validate_identity` and `validate_all` in tests/dialects/test_snowflake.py at the sqlglot commit
 its `origin` field names. Only Snowflake's syntax verdict on each statement is recorded.
 
+The formatter corpus crates/sqlquack-format/src/format/tests/fixtures/format_corpus.json holds
+SELECT and WITH queries from sqlglot's dialect identity test fixtures, as extracted by polyglot,
+with the layouts SQLClean's formatter gives them. It is copied unchanged from SQLClean
+(https://github.com/sqlstack-io/sqlclean), with its notice FORMAT_CORPUS_NOTICE.md beside it.
+
 sqlglot is distributed under the following licence:
 
 MIT License
@@ -58,6 +63,8 @@ SQLQuack's DuckDB result-type rules, in crates/sqlquack-semantics/src/lineage/_h
 and duckdb_types.rs, are ported from polyglot's engine type rules, and the fixture
 crates/sqlquack-semantics/src/lineage/tests/fixtures/duckdb_engine_types.json is polyglot's
 tests/fixtures/engine_types/duckdb.json, the result types DuckDB bound for its synthetic cases.
+The lint Rules' scope walk and aggregate classifier, in crates/sqlquack-lint/src/tree, are ported
+from polyglot's scope.rs and traversal.rs.
 
 polyglot is distributed under the following licence: