feat(labrinth): overhaul malware scanner report storage and routes

apps/frontend/nuxt.config.ts

@@ -161,7 +161,7 @@ export default defineNuxtConfig({
 				(state.errors ?? []).length === 0
 			) {
 				console.log(
-					'Tags already recently generated. Delete apps/frontend/generated/state.json to force regeneration.',
+					'Tags already recently generated. Delete apps/frontend/src/generated/state.json to force regeneration.',
 				)
 				return
 			}

apps/labrinth/.env.docker-compose

@@ -128,7 +128,7 @@ PYRO_API_KEY=none
 BREX_API_URL=https://platform.brexapis.com/v2/
 BREX_API_KEY=none
 
-DELPHI_URL=none
+DELPHI_URL=http://labrinth-delphi:59999
 DELPHI_SLACK_WEBHOOK=none
 
 AVALARA_1099_API_URL=https://www.track1099.com/api

apps/labrinth/migrations/20250810155316_delphi-reports.sql

@@ -0,0 +1,44 @@
+CREATE TYPE delphi_report_severity AS ENUM ('low', 'medium', 'high', 'severe');
+
+CREATE TYPE delphi_report_issue_status AS ENUM ('pending', 'approved', 'rejected');
+
+-- A Delphi analysis report for a project version
+CREATE TABLE delphi_reports (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	file_id BIGINT REFERENCES files (id)
+		ON DELETE SET NULL
+		ON UPDATE CASCADE,
+	delphi_version INTEGER NOT NULL,
+	artifact_url VARCHAR(2048) NOT NULL,
+	created TIMESTAMPTZ DEFAULT CURRENT_TIMESTAMP NOT NULL,
+	severity DELPHI_REPORT_SEVERITY NOT NULL,
+	UNIQUE (file_id, delphi_version)
+);
+CREATE INDEX delphi_version ON delphi_reports (delphi_version);
+
+-- An issue found in a Delphi report. Every issue belongs to a report,
+-- and a report can have zero, one, or more issues attached to it
+CREATE TABLE delphi_report_issues (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	report_id BIGINT NOT NULL REFERENCES delphi_reports (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	issue_type TEXT NOT NULL,
+	status DELPHI_REPORT_ISSUE_STATUS NOT NULL,
+	UNIQUE (report_id, issue_type)
+);
+CREATE INDEX delphi_report_issue_by_status_and_type ON delphi_report_issues (status, issue_type);
+
+-- A Java class affected by a Delphi report issue. Every affected
+-- Java class belongs to a specific issue, and an issue can have zero,
+-- one, or more affected classes. (Some issues may be artifact-wide,
+-- or otherwise not really specific to any particular class.)
+CREATE TABLE delphi_report_issue_java_classes (
+	id BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY,
+	issue_id BIGINT NOT NULL REFERENCES delphi_report_issues (id)
+		ON DELETE CASCADE
+		ON UPDATE CASCADE,
+	internal_class_name TEXT NOT NULL,
+	decompiled_source TEXT,
+	UNIQUE (issue_id, internal_class_name)
+);