@pipeline-builder/pipeline-data 4.1.18 → 4.1.19

package/lib/database/schema/ecosystem.d.ts

@@ -1,4 +1,4 @@
-import type { InstallVersionPolicy } from '@pipeline-builder/api-core';
+import type { InstallVersionPolicy, PluginScanFlag } from '@pipeline-builder/api-core';
 import type { PluginIcon, PluginSecret, PluginUploadedIcon } from './plugin.js';
 /** Per-component health scores; mirrors api-core's `HealthBreakdown`. */
 export type HealthBreakdown = Record<string, {
@@ -1040,6 +1040,40 @@ export declare const pluginListingVersion: import("drizzle-orm/pg-core").PgTable
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        vulnCriticalFixable: import("drizzle-orm/pg-core").PgColumn<{
+            name: "vuln_critical_fixable";
+            tableName: "plugin_listing_versions";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        vulnHighFixable: import("drizzle-orm/pg-core").PgColumn<{
+            name: "vuln_high_fixable";
+            tableName: "plugin_listing_versions";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         scannedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "scanned_at";
             tableName: "plugin_listing_versions";
@@ -1057,6 +1091,42 @@ export declare const pluginListingVersion: import("drizzle-orm/pg-core").PgTable
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        scanFlaggedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "scan_flagged_at";
+            tableName: "plugin_listing_versions";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        scanFlag: import("drizzle-orm/pg-core").PgColumn<{
+            name: "scan_flag";
+            tableName: "plugin_listing_versions";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: PluginScanFlag;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: PluginScanFlag;
+        }>;
         baseImageCreatedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "base_image_created_at";
             tableName: "plugin_listing_versions";
@@ -4831,6 +4901,320 @@ export declare const pluginInstallPolicy: import("drizzle-orm/pg-core").PgTableW
     };
     dialect: 'pg';
 }>;
+/**
+ * Per-org plugin security notification settings (docs/plugin-publishing.md
+ * "Scan gates"): who hears about a blocked build (N30) and a rescan finding
+ * (N31), and where else they go. One row per org; absent = the column
+ * defaults. The webhook secret and the external address are stored ENCRYPTED
+ * (api-core secret-encryption, the org's key) and never returned; the address
+ * is used only once confirmed through its emailed single-use link
+ * (`external_verify_token_hash`, sha256 of the token).
+ *
+ * @table plugin_security_notification_prefs
+ */
+export declare const pluginSecurityNotificationPref: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "plugin_security_notification_prefs";
+    schema: undefined;
+    columns: {
+        orgId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "org_id";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        recipientMode: import("drizzle-orm/pg-core").PgColumn<{
+            name: "recipient_mode";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: "users" | "writers";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 10;
+            $type: "users" | "writers";
+        }>;
+        targetUsers: import("drizzle-orm/pg-core").PgColumn<{
+            name: "target_users";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "array";
+            columnType: "PgArray";
+            data: string[];
+            driverParam: string | string[];
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: import("drizzle-orm").Column<{
+                name: "target_users";
+                tableName: "plugin_security_notification_prefs";
+                dataType: "string";
+                columnType: "PgText";
+                data: string;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            baseBuilder: import("drizzle-orm/pg-core").PgColumnBuilder<{
+                name: "target_users";
+                dataType: 'string';
+                columnType: 'PgText';
+                data: string;
+                enumValues: [string, ...string[]];
+                driverParam: string;
+            }, {}, {}, import("drizzle-orm").ColumnBuilderExtraConfig>;
+            size: undefined;
+            $type: string[];
+        }>;
+        notifyRescan: import("drizzle-orm/pg-core").PgColumn<{
+            name: "notify_rescan";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        digestMode: import("drizzle-orm/pg-core").PgColumn<{
+            name: "digest_mode";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: "daily" | "immediate" | "weekly";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 10;
+            $type: "daily" | "immediate" | "weekly";
+        }>;
+        webhookUrl: import("drizzle-orm/pg-core").PgColumn<{
+            name: "webhook_url";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 2048;
+        }>;
+        webhookSecret: import("drizzle-orm/pg-core").PgColumn<{
+            name: "webhook_secret";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        externalEmailEnc: import("drizzle-orm/pg-core").PgColumn<{
+            name: "external_email_enc";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        externalEmailHash: import("drizzle-orm/pg-core").PgColumn<{
+            name: "external_email_hash";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 64;
+        }>;
+        externalEmailVerifiedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "external_email_verified_at";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        externalVerifyTokenHash: import("drizzle-orm/pg-core").PgColumn<{
+            name: "external_verify_token_hash";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 64;
+        }>;
+        externalVerifyExpiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "external_verify_expires_at";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedBy: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_by";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "plugin_security_notification_prefs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
 /**
  * N21 idempotency: one delivery per (advisory, installing org), so a retried
  * fan-out never notifies an org twice.
@@ -5966,6 +6350,57 @@ export declare const publicListedVersions: import("drizzle-orm/pg-core").PgViewW
         identity: undefined;
         generated: undefined;
     }, {}, {}>;
+    vulnCriticalFixable: import("drizzle-orm/pg-core").PgColumn<{
+        name: "vuln_critical_fixable";
+        tableName: "public_listed_versions";
+        dataType: "number";
+        columnType: "PgInteger";
+        data: number;
+        driverParam: string | number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    vulnHighFixable: import("drizzle-orm/pg-core").PgColumn<{
+        name: "vuln_high_fixable";
+        tableName: "public_listed_versions";
+        dataType: "number";
+        columnType: "PgInteger";
+        data: number;
+        driverParam: string | number;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
+    scanFlaggedAt: import("drizzle-orm/pg-core").PgColumn<{
+        name: "scan_flagged_at";
+        tableName: "public_listed_versions";
+        dataType: "date";
+        columnType: "PgTimestamp";
+        data: Date;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {}>;
 }>;
 /**
  * `public_advisories`: PUBLISHED advisories on listed listings, public columns
@@ -6578,6 +7013,8 @@ export type PluginInstall = typeof pluginInstall.$inferSelect;
 export type PluginInstallInsert = typeof pluginInstall.$inferInsert;
 export type PluginInstallPolicy = typeof pluginInstallPolicy.$inferSelect;
 export type PluginInstallPolicyInsert = typeof pluginInstallPolicy.$inferInsert;
+export type PluginSecurityNotificationPref = typeof pluginSecurityNotificationPref.$inferSelect;
+export type PluginSecurityNotificationPrefInsert = typeof pluginSecurityNotificationPref.$inferInsert;
 export type PluginAdvisoryDelivery = typeof pluginAdvisoryDelivery.$inferSelect;
 export type PluginAdvisoryDeliveryInsert = typeof pluginAdvisoryDelivery.$inferInsert;
 export type PublicListing = typeof publicListings.$inferSelect;