CLI and free rules — open source
The outage rules and credential hygiene, run locally, JSON output for scripting. Never phones home; --remote records the check in the run log, and brings in the full corpus on Startup and above.
The bolvrk CLI is the front door. It bundles the parser and the free rule set — the outage core (locks that block writes, full-table rewrites, constraints that fail on populated tables, destructive drops) and the credential rules — and runs them on your machine with no account, no config and no network call.
Output is a terminal report by default and a frozen JSON contract with --json: severity, what breaks, why, and which rule. The JSON is byte-identical to what the hosted API returns, so scripts and agents written against the local CLI keep working when a team moves to the hosted service.
npx bolvrk check migration.sql
npx bolvrk check migrations/*.sql --json
npx bolvrk check - < migration.sqlLocal by default, hosted on request
Nothing leaves the machine unless you say so. Add --remote with a team token and the same check runs in the hosted service: it is recorded in the run log, and on Startup and above the full corpus and live-schema refinement apply. The CLI prints exactly what the hosted run returned, including how many rules the plan skipped.
A bolvrk.json at the repo root holds the defaults — migration globs, the block threshold, repository ignores — and is found from any subdirectory.
Open source
The CLI, the GitHub Action and the free rules are open source. The engine core is source-available. The hosted rules run in the Bolvrk service and are not in the public repository — the CLI runs exactly the rules it ships with, and says so.
The CLI is open source and needs no account: npx bolvrk check migration.sql