Use sqlite3-parser for schemadiff reference analysis

[mmkal]

Summary

This PR adds sqlite3-parser as a normal sqlfu dependency and uses it for SQLite schemadiff reference analysis.

The merge effect is deliberately narrow: sqlfu now parses stored SQLite SQL bodies for view, trigger, and check(...) references, then translates the AST into sqlfu-owned facts (referencedTables, referencedColumns) before planner code sees it. SQLite catalog inspection remains the authority for tables, columns, indexes, keys, generated columns, and similar schema metadata.

Closes #110

Behavior Improvements

The justification here is concrete examples rather than a line-count win. analysis.ts gets smaller, but the new collector is intentionally explicit and adds code overall.

CTE shadowing no longer creates a false view blocker

Before, token scanning saw person and nickname in this view and dropped/recreated it when person.nickname was removed:

create view cte_person_names as
with person as (select 'display' as nickname)
select nickname from person;

Now the parser-backed collector understands that person is a CTE name in that scope, so the diff can stay at:

alter table person drop column nickname;

Trigger writes to another table no longer block the subject table drop

Before, this trigger on person was treated as a blocker for dropping person.nickname because token scanning saw the audit_log(nickname) insert column:

create trigger person_log after update on person begin
  insert into audit_log(nickname) values ('changed');
end;

Now trigger-subject column references are distinguished from target-table insert columns, so this also stays a direct column drop.

Implementation Notes

• Added sqlite3-parser@0.7.1 to packages/sqlfu dependencies.
• Added packages/sqlfu/src/schemadiff/sqlite/references.ts as the only module that talks to third-party AST nodes.
• Kept analysis.ts returning the existing SqliteDependencyFact shape.
• Replaced the old check-constraint splitter with parsed CreateTableStmt check-expression collection, with the previous heuristic retained only as a parse-failure fallback.
• Left formatter, TypeSQL, and partial-index where parsing out of scope.
• Moved the task file to tasks/complete/2026-05-12-sqlite3-parser-schemadiff.md.

Size

After pnpm --filter sqlfu build, cd packages/sqlfu && npm pack --dry-run --json reports:

• packed: 241,990 bytes
• unpacked: 1,005,020 bytes
• files: 181

The external dependency is not bundled into the sqlfu tarball; users will install the separate sqlite3-parser package as a runtime dependency.

Verification

• pnpm --filter sqlfu test --run test/schemadiff
• pnpm --filter sqlfu typecheck
• pnpm --filter sqlfu build
• cd packages/sqlfu && npm pack --dry-run --json

Package size — packed 239.6 kB (+3.2 kB, +1.3%)

Package size

	main	this PR	Δ
packed	236.5 kB	239.6 kB	+1.3%
unpacked	971.3 kB	995.8 kB	+2.5%
files	181	183	+2

dist/vendor/*.js bundles

	main	this PR	Δ
vendor/sha256.js	4.3 kB	4.3 kB	0
vendor/sql-formatter/*.js	58.3 kB	58.3 kB	0
vendor/sqlfu-sqlite-parser/*.js	17.2 kB	17.2 kB	0
vendor/standard-schema/*.js	2.8 kB	2.8 kB	0
vendor/typesql/*.js	134.6 kB	134.6 kB	0

Measured with npm pack --dry-run --json on sqlfu (0.0.3-7 on main vs 0.0.3-7 on this PR).

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/sqlfu@111

commit: 9d8332c