@pipeline-builder/pipeline-data 4.1.1 → 4.1.2

package/lib/api/reporting/caches.d.ts

@@ -0,0 +1,2 @@
+export declare const inventoryCache: import("@pipeline-builder/api-core").CacheService;
+export declare const timeseriesCache: import("@pipeline-builder/api-core").CacheService;

package/lib/api/reporting/caches.js

@@ -0,0 +1,14 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * The two report caches. A separate module because both the service (for
+ * invalidation) and the extracted query modules (via runReport) need them, and a
+ * shared singleton must have exactly one definition site.
+ *
+ * Inventory reads (plugin summary/distribution/versions) change rarely — 5 min.
+ * Timeseries reads (execution/build metrics over a range) — 2 min.
+ */
+import { createCacheService } from '@pipeline-builder/api-core';
+export const inventoryCache = createCacheService('report:inv:', parseInt(process.env.CACHE_TTL_REPORT_INVENTORY || '300', 10));
+export const timeseriesCache = createCacheService('report:ts:', parseInt(process.env.CACHE_TTL_REPORT_TIMESERIES || '120', 10));
+//# sourceMappingURL=data:application/json;base64,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

package/lib/api/reporting/dora-scoring.d.ts

@@ -0,0 +1,71 @@
+import type { DoraLevel } from './types.js';
+/**
+ * DORA performance banding plus the small statistics helpers it needs.
+ * Pure functions — no database access, no I/O — which is what lets the
+ * thresholds be unit-tested independently of the queries that feed them.
+ */
+/**
+ * The DORA headline environment. Deployment to this literal env name is the
+ * industry-standard DORA signal; MTTR is measured production-only, and this
+ * environment's card is the summary shown at the top of the panel.
+ */
+export declare const HEADLINE_ENV = "production";
+/**
+ * Incident→deploy correlation window (Phase 5). An incident is attributed to the
+ * most recent SUCCESSFUL deploy to its environment whose `completed_at` is within
+ * this many hours before the incident's `opened_at`. Default 24h; override via
+ * `DORA_INCIDENT_WINDOW_HOURS`. Guarded to a positive finite number.
+ */
+export declare const DORA_INCIDENT_WINDOW_HOURS: number;
+/**
+ * Resolve the effective incident→deploy correlation window (Phase 5b). A per-org
+ * override (from `dora_settings.incident_window_hours`, surfaced through the
+ * settings endpoint and threaded into {@link DoraOptions.incidentWindowHours})
+ * wins when it is a positive finite number; otherwise the global env default
+ * `DORA_INCIDENT_WINDOW_HOURS` applies. Centralized so the DORA correlation, the
+ * incidents list, and the wiring-test dry-run all agree on the same rule.
+ */
+export declare function resolveIncidentWindowHours(override?: number | null): number;
+/**
+ * Reporting retention windows (Phase 7). Records in `pipeline_events`,
+ * `deployment_outcomes`, and `incidents` grow unbounded without a sweep, so a
+ * split, per-org retention purge (see {@link ReportingService.purgeExpiredReportingData})
+ * hard-deletes rows older than these windows, by `created_at`:
+ *  - **Standard events** — `pipeline_events` with `environment IS NULL`
+ *    (non-deploy STAGE/ACTION/build). High volume → short default (30 days).
+ *  - **DORA source** — `pipeline_events` with `environment IS NOT NULL` (deploy
+ *    stages) plus all of `deployment_outcomes` and `incidents`. Low volume →
+ *    longer default (180 days). DORA history is therefore bounded by this window;
+ *    the report query still hard-caps at 365 days (a longer per-org override only
+ *    retains raw source rows, never widens a report).
+ * `ingest_health` and `dora_settings` are never purged. Env-overridable globals;
+ * a per-org override in `dora_settings` wins (see {@link resolveEventRetentionDays}).
+ */
+/** Deployment frequency by deploys/day: elite ≥1/day, high ≥1/week, medium ≥1/month. */
+export declare function doraLevelForFrequency(perDay: number, deployments: number): DoraLevel;
+/** Change failure rate by percent: elite ≤5%, high ≤10%, medium ≤15%. */
+export declare function doraLevelForChangeFailure(pct: number, total: number): DoraLevel;
+/** Time to restore by seconds: elite <1h, high <1 day, medium <1 week. */
+export declare function doraLevelForRestore(avgSeconds: number | null): DoraLevel;
+/** Lead time by seconds: elite <1 day, high <1 week, medium <1 month. */
+export declare function doraLevelForLeadTime(medianSeconds: number | null): DoraLevel;
+/**
+ * Round `value` to `digits` decimal places, returning a real number. Small
+ * module-private helper so the DORA shaping doesn't repeat the
+ * `Number(Number(x).toFixed(n))` pattern (toFixed alone yields a string).
+ */
+export declare function round(value: number, digits: number): number;
+/**
+ * Median of a numeric sample, or `null` when empty. Used for measured lead time
+ * and MTTR — both are cross-source gaps computed in JS from clamped deltas, so
+ * the median lives here rather than in SQL PERCENTILE_CONT (keeps the golden
+ * fixture tests able to prove the metric math without a live Postgres).
+ */
+export declare function median(values: number[]): number | null;
+/**
+ * Roll a group of deploy/stage events (grouped per execution) up to one terminal
+ * status: FAILED wins, then SUCCEEDED, else OTHER (still-running / non-terminal).
+ * Shared by the three per-(env|stage, execution) rollup CTEs — DORA metrics, DORA
+ * trend, and build health — so the precedence can't drift between them. Assumes the
+ * grouped event alias is `e`.
+ */

package/lib/api/reporting/dora-scoring.js

@@ -0,0 +1,126 @@
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * DORA performance banding plus the small statistics helpers it needs.
+ * Pure functions — no database access, no I/O — which is what lets the
+ * thresholds be unit-tested independently of the queries that feed them.
+ */
+/**
+ * The DORA headline environment. Deployment to this literal env name is the
+ * industry-standard DORA signal; MTTR is measured production-only, and this
+ * environment's card is the summary shown at the top of the panel.
+ */
+export const HEADLINE_ENV = 'production';
+/**
+ * Incident→deploy correlation window (Phase 5). An incident is attributed to the
+ * most recent SUCCESSFUL deploy to its environment whose `completed_at` is within
+ * this many hours before the incident's `opened_at`. Default 24h; override via
+ * `DORA_INCIDENT_WINDOW_HOURS`. Guarded to a positive finite number.
+ */
+export const DORA_INCIDENT_WINDOW_HOURS = (() => {
+    const raw = Number(process.env.DORA_INCIDENT_WINDOW_HOURS);
+    return Number.isFinite(raw) && raw > 0 ? raw : 24;
+})();
+/**
+ * Resolve the effective incident→deploy correlation window (Phase 5b). A per-org
+ * override (from `dora_settings.incident_window_hours`, surfaced through the
+ * settings endpoint and threaded into {@link DoraOptions.incidentWindowHours})
+ * wins when it is a positive finite number; otherwise the global env default
+ * `DORA_INCIDENT_WINDOW_HOURS` applies. Centralized so the DORA correlation, the
+ * incidents list, and the wiring-test dry-run all agree on the same rule.
+ */
+export function resolveIncidentWindowHours(override) {
+    return override != null && Number.isFinite(override) && override > 0 ? override : DORA_INCIDENT_WINDOW_HOURS;
+}
+/**
+ * Reporting retention windows (Phase 7). Records in `pipeline_events`,
+ * `deployment_outcomes`, and `incidents` grow unbounded without a sweep, so a
+ * split, per-org retention purge (see {@link ReportingService.purgeExpiredReportingData})
+ * hard-deletes rows older than these windows, by `created_at`:
+ *  - **Standard events** — `pipeline_events` with `environment IS NULL`
+ *    (non-deploy STAGE/ACTION/build). High volume → short default (30 days).
+ *  - **DORA source** — `pipeline_events` with `environment IS NOT NULL` (deploy
+ *    stages) plus all of `deployment_outcomes` and `incidents`. Low volume →
+ *    longer default (180 days). DORA history is therefore bounded by this window;
+ *    the report query still hard-caps at 365 days (a longer per-org override only
+ *    retains raw source rows, never widens a report).
+ * `ingest_health` and `dora_settings` are never purged. Env-overridable globals;
+ * a per-org override in `dora_settings` wins (see {@link resolveEventRetentionDays}).
+ */
+/** Deployment frequency by deploys/day: elite ≥1/day, high ≥1/week, medium ≥1/month. */
+export function doraLevelForFrequency(perDay, deployments) {
+    if (deployments <= 0)
+        return null;
+    if (perDay >= 1)
+        return 'elite';
+    if (perDay >= 1 / 7)
+        return 'high';
+    if (perDay >= 1 / 30)
+        return 'medium';
+    return 'low';
+}
+/** Change failure rate by percent: elite ≤5%, high ≤10%, medium ≤15%. */
+export function doraLevelForChangeFailure(pct, total) {
+    if (total <= 0)
+        return null;
+    if (pct <= 5)
+        return 'elite';
+    if (pct <= 10)
+        return 'high';
+    if (pct <= 15)
+        return 'medium';
+    return 'low';
+}
+/** Time to restore by seconds: elite <1h, high <1 day, medium <1 week. */
+export function doraLevelForRestore(avgSeconds) {
+    if (avgSeconds == null)
+        return null;
+    if (avgSeconds < 3600)
+        return 'elite';
+    if (avgSeconds < 86400)
+        return 'high';
+    if (avgSeconds < 604800)
+        return 'medium';
+    return 'low';
+}
+/** Lead time by seconds: elite <1 day, high <1 week, medium <1 month. */
+export function doraLevelForLeadTime(medianSeconds) {
+    if (medianSeconds == null)
+        return null;
+    if (medianSeconds < 86400)
+        return 'elite';
+    if (medianSeconds < 604800)
+        return 'high';
+    if (medianSeconds < 2592000)
+        return 'medium';
+    return 'low';
+}
+/**
+ * Round `value` to `digits` decimal places, returning a real number. Small
+ * module-private helper so the DORA shaping doesn't repeat the
+ * `Number(Number(x).toFixed(n))` pattern (toFixed alone yields a string).
+ */
+export function round(value, digits) {
+    return Number(value.toFixed(digits));
+}
+/**
+ * Median of a numeric sample, or `null` when empty. Used for measured lead time
+ * and MTTR — both are cross-source gaps computed in JS from clamped deltas, so
+ * the median lives here rather than in SQL PERCENTILE_CONT (keeps the golden
+ * fixture tests able to prove the metric math without a live Postgres).
+ */
+export function median(values) {
+    if (values.length === 0)
+        return null;
+    const s = [...values].sort((a, b) => a - b);
+    const mid = Math.floor(s.length / 2);
+    return s.length % 2 === 1 ? s[mid] : (s[mid - 1] + s[mid]) / 2;
+}
+/**
+ * Roll a group of deploy/stage events (grouped per execution) up to one terminal
+ * status: FAILED wins, then SUCCEEDED, else OTHER (still-running / non-terminal).
+ * Shared by the three per-(env|stage, execution) rollup CTEs — DORA metrics, DORA
+ * trend, and build health — so the precedence can't drift between them. Assumes the
+ * grouped event alias is `e`.
+ */
+//# sourceMappingURL=data:application/json;base64,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

package/lib/api/reporting/dora.d.ts

@@ -0,0 +1,47 @@
+import type { DoraOptions, DoraMetrics, DoraTrendPoint, BuildHealth } from './types.js';
+/**
+ * 1.9 DORA metrics over a [from,to] deploy-completion window, org-scoped +
+ * rollup-aware. DEPLOY-BASIS ONLY — every metric derives from real deploy-stage
+ * executions (`event_type='STAGE'` with a non-null `environment`, set by the
+ * forwarder for the stages a user declared in `pb.deploys`). No run-based
+ * fallback: a pipeline with no deploy stage produces no DORA data.
+ *
+ * Four scoped SQL scans run inside one tx (each org-gated by `p.org_id ${pred}`
+ * / `o.org_id ${pred}` so a rollup passes the org→team subtree and a foreign
+ * org's rows never enter): (1) terminal deploy rows PER (execution, env) — one
+ * "deployment" = one execution reaching an env (D1) — → DF / deploy-time CFR /
+ * measured lead time (lead time joins the execution's earliest commit, D2);
+ * the scan also reaches back `windowHours` before `from` so incidents opened
+ * near the window start can correlate to a just-prior deploy; (2) `deployment_outcomes`
+ * in-window → post-deploy CFR component; (3) production restored/failed
+ * outcomes joined to their deploy → MTTR; (4) registry vs deploying → coverage.
+ * The cross-source medians (lead time, MTTR) are computed in JS from clamped
+ * (≥0) deltas.
+ *
+ * @param opts.pipelineId    restrict to one pipeline (per-pipeline DORA)
+ * @param opts.environment   restrict to one deploy environment
+ */
+export declare function getDoraMetrics(orgId: string, from: string, to: string, orgIds?: string[], opts?: DoraOptions): Promise<DoraMetrics>;
+/**
+ * 1.9b DORA trend — deployment frequency + deploy-time change-failure rate
+ * bucketed by `interval` (day/week/month) for a sparkline. Deploy-basis like
+ * getDoraMetrics: buckets terminal deploy-stage executions on their
+ * `completed_at`. Shares the org/rollup + pipelineId/environment scoping. MTTR,
+ * lead time, and post-deploy CFR are intentionally omitted (too heavy to bucket).
+ */
+export declare function getDoraTrend(orgId: string, interval: string, from: string, to: string, orgIds?: string[], opts?: DoraOptions): Promise<DoraTrendPoint[]>;
+/**
+ * 1.10 Per-pipeline BUILD HEALTH (Phase 6) — a standard (NOT `advanced_reporting`)
+ * per-stage breakdown for one pipeline over a [from,to] window. Aggregates the
+ * existing `pipeline_events` STAGE rows: each stage is rolled up per execution
+ * to a terminal status (FAILED wins, then SUCCEEDED) + its max duration, then
+ * grouped per stage into run/success/failure counts, a success rate, and
+ * duration percentiles (p50/p90/p99). Totals sum across stages. Org-scoped via
+ * the pipeline join (`p.org_id ${pred}`) + rollup-aware like the sibling reports;
+ * a pipelineId owned by another org returns an empty breakdown.
+ */
+export declare function getBuildHealth(orgId: string, pipelineId: string, from: string, to: string, orgIds?: string[]): Promise<BuildHealth>;
+/** 2.1 Plugin summary — counts and breakdowns.
+ *  INTENTIONALLY SINGLE-ORG (no rollup): plugin inventory is an org-owned
+ *  asset count, not an execution/build activity report, so a parent's view is
+ *  its own plugins — teams manage their own inventory. Single `= $org` scope. */