feat(ql3): enforce staged secret binding persistence

This commit is contained in:
whyour
2026-08-13 19:20:39 +08:00
parent f111d8b10c
commit 326783ff14
32 changed files with 1071 additions and 71 deletions
@@ -131,6 +131,16 @@ function database(serverVersionNum = '160014') {
})),
};
}
if (text.includes('FROM pg_trigger triggers')) {
return {
rows: contract.triggers.map((definition) => ({
triggerName: definition.name,
tableName: definition.tableName,
functionName: definition.functionName,
enabled: 'O',
})),
};
}
if (text.includes('FROM pg_catalog.pg_roles')) {
return {
rows: [
@@ -160,6 +170,7 @@ function database(serverVersionNum = '160014') {
'commit_plugin_package_lifecycle',
'commit_plugin_package_task_reconciliation',
'commit_plugin_package_quarantine',
'enforce_plugin_package_secret_binding_target',
'enforce_plugin_package_secret_materialization',
'enforce_plugin_package_stage_provenance',
'lock_active_plugin_package_project',
@@ -167,6 +167,16 @@ function database(serverVersionNum = '160014') {
})),
};
}
if (text.includes('FROM pg_trigger triggers')) {
return {
rows: contract.triggers.map((definition) => ({
triggerName: definition.name,
tableName: definition.tableName,
functionName: definition.functionName,
enabled: 'O',
})),
};
}
if (text.includes('FROM pg_catalog.pg_roles')) {
return {
rows: [
@@ -193,6 +203,7 @@ function database(serverVersionNum = '160014') {
rows: contract.functions.map(({ name: functionName }) => ({
functionName,
executeAllowed: ![
'enforce_plugin_package_secret_binding_target',
'enforce_plugin_package_secret_materialization',
'enforce_plugin_package_stage_provenance',
'plugin_package_automation_start_allowed',