chenxin
491136c770
- engine/bindings：nanobind 官方薄绑定包 hunjing-lingtai（LingtaiEngine RAII、HjStatus→LingtaiError 映射、HJ_ABI_VERSION 导出）；scikit-build-core 构建，直接编译引擎源码自包含 - backend 以 editable 路径依赖接入；typings/lingtai.pyi 类型存根（mypy strict 全绿） - app/core/lingtai.py：懒初始化单例 + LingtaiUnavailable fail-closed（禁止宿主第二实现降级） - 迁移 3：message.parser_version；post_message 的 markdown 输入经 hj_transform 规范化为 canonical blocks（展开 code/mermaid/math 并标注 parser_version，契约第 4 节） - 测试 29 项全绿：消息展开、Python/C++ golden 字节一致、引擎注入失败时消息路径显式 500（fail-closed 验证）
252 lines
10 KiB
Python
252 lines
10 KiB
Python
"""首批领域模型：身份、会话、服务账号、审计与 Outbox（WP-01）。
|
||
|
||
- 主键为带前缀的 UUIDv7 文本（ADR-015）；Session ID 为 CSPRNG opaque（秘密不用 UUID）。
|
||
- 命名约定见 app/db/base.py（pk_/uq_/ix_/fk_，AGENTS.md 8.6）。
|
||
- AuditEvent 与 OutboxEvent 不可变：无 updated_at，修正写新记录（契约第 4.4 节）。
|
||
"""
|
||
|
||
from datetime import datetime
|
||
from typing import Any
|
||
|
||
from sqlalchemy import CheckConstraint, DateTime, ForeignKey, Index, String, func
|
||
from sqlalchemy.dialects.postgresql import JSONB
|
||
from sqlalchemy.orm import Mapped, mapped_column
|
||
|
||
from app.core.ids import new_id
|
||
from app.db.base import Base
|
||
|
||
|
||
class User(Base):
|
||
__tablename__ = "user"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True, default=lambda: new_id("user_"))
|
||
email: Mapped[str] = mapped_column(String, nullable=False, unique=True)
|
||
display_name: Mapped[str] = mapped_column(String, nullable=False)
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
updated_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now(), onupdate=func.now()
|
||
)
|
||
|
||
|
||
class PersonalDomain(Base):
|
||
__tablename__ = "personal_domain"
|
||
|
||
id: Mapped[str] = mapped_column(
|
||
String, primary_key=True, default=lambda: new_id("domain_")
|
||
)
|
||
user_id: Mapped[str] = mapped_column(
|
||
ForeignKey("user.id", ondelete="restrict"), nullable=False, index=True
|
||
)
|
||
name: Mapped[str] = mapped_column(String, nullable=False)
|
||
# 区域驻留（ADR-024 之前的数据驻留决策）：默认区域，迁移走正式协议
|
||
data_region: Mapped[str] = mapped_column(String, nullable=False, default="default")
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
|
||
|
||
class Session(Base):
|
||
"""Web 会话：ID 为 CSPRNG opaque value，数据库只存校验值（ADR-015）。"""
|
||
|
||
__tablename__ = "session"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True)
|
||
user_id: Mapped[str] = mapped_column(
|
||
ForeignKey("user.id", ondelete="cascade"), nullable=False, index=True
|
||
)
|
||
token_hash: Mapped[str] = mapped_column(String, nullable=False, unique=True)
|
||
csrf_token_hash: Mapped[str] = mapped_column(String, nullable=False)
|
||
expires_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, index=True
|
||
)
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
revoked_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
|
||
|
||
|
||
class ServiceAccount(Base):
|
||
"""自动化账号：API key 明文只显示一次，只保存哈希、前缀、scope 与撤销状态。"""
|
||
|
||
__tablename__ = "service_account"
|
||
|
||
id: Mapped[str] = mapped_column(
|
||
String, primary_key=True, default=lambda: new_id("service_account_")
|
||
)
|
||
domain_id: Mapped[str] = mapped_column(
|
||
ForeignKey("personal_domain.id", ondelete="cascade"), nullable=False
|
||
)
|
||
name: Mapped[str] = mapped_column(String, nullable=False)
|
||
key_prefix: Mapped[str] = mapped_column(String, nullable=False, index=True)
|
||
key_hash: Mapped[str] = mapped_column(String, nullable=False)
|
||
scopes: Mapped[list[str]] = mapped_column(JSONB, nullable=False, default=list)
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
revoked_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
|
||
|
||
__table_args__ = (Index("uq_service_account_domain_name", "domain_id", "name", unique=True),)
|
||
|
||
|
||
class AuditEvent(Base):
|
||
"""不可变审计链：状态与 Outbox 在同一事务提交（契约第 4.4 节）。"""
|
||
|
||
__tablename__ = "audit_event"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True, default=lambda: new_id("audit_"))
|
||
occurred_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
actor_type: Mapped[str] = mapped_column(String, nullable=False)
|
||
actor_id: Mapped[str] = mapped_column(String, nullable=False)
|
||
action: Mapped[str] = mapped_column(String, nullable=False)
|
||
aggregate_type: Mapped[str] = mapped_column(String, nullable=False)
|
||
aggregate_id: Mapped[str] = mapped_column(String, nullable=False)
|
||
payload: Mapped[dict[str, Any] | None] = mapped_column(JSONB, nullable=True)
|
||
trace_id: Mapped[str | None] = mapped_column(String, nullable=True)
|
||
|
||
__table_args__ = (
|
||
# 聚合时间线是审计的主要查询路径（最左前缀覆盖聚合定位）
|
||
Index("ix_audit_event_aggregate", "aggregate_type", "aggregate_id", "occurred_at"),
|
||
Index("ix_audit_event_occurred_at", "occurred_at"),
|
||
)
|
||
|
||
|
||
class OutboxEvent(Base):
|
||
"""Transactional Outbox：已提交领域事实的可靠投递队列。"""
|
||
|
||
__tablename__ = "outbox_event"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True, default=lambda: new_id("event_"))
|
||
occurred_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
aggregate_type: Mapped[str] = mapped_column(String, nullable=False)
|
||
aggregate_id: Mapped[str] = mapped_column(String, nullable=False)
|
||
event_type: Mapped[str] = mapped_column(String, nullable=False)
|
||
payload: Mapped[dict[str, Any]] = mapped_column(JSONB, nullable=False)
|
||
status: Mapped[str] = mapped_column(String, nullable=False, default="pending")
|
||
attempts: Mapped[int] = mapped_column(nullable=False, default=0)
|
||
delivered_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
|
||
|
||
__table_args__ = (
|
||
CheckConstraint(
|
||
"status IN ('pending', 'delivered', 'failed')",
|
||
name="status_values",
|
||
),
|
||
# 投递循环按状态+时间扫描待处理事件
|
||
Index("ix_outbox_event_status_occurred", "status", "occurred_at"),
|
||
Index("ix_outbox_event_aggregate", "aggregate_type", "aggregate_id"),
|
||
)
|
||
|
||
|
||
class Conversation(Base):
|
||
"""对话容器：归属个人域（垂直切片 WP-03 最小集）。"""
|
||
|
||
__tablename__ = "conversation"
|
||
|
||
id: Mapped[str] = mapped_column(
|
||
String, primary_key=True, default=lambda: new_id("conversation_")
|
||
)
|
||
personal_domain_id: Mapped[str] = mapped_column(
|
||
ForeignKey("personal_domain.id", ondelete="cascade"), nullable=False, index=True
|
||
)
|
||
title: Mapped[str] = mapped_column(String, nullable=False, default="未命名对话")
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
updated_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now(), onupdate=func.now()
|
||
)
|
||
|
||
|
||
class Branch(Base):
|
||
"""对话分支：创建会话时生成默认主分支。"""
|
||
|
||
__tablename__ = "branch"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True, default=lambda: new_id("branch_"))
|
||
conversation_id: Mapped[str] = mapped_column(
|
||
ForeignKey("conversation.id", ondelete="cascade"), nullable=False, index=True
|
||
)
|
||
title: Mapped[str] = mapped_column(String, nullable=False, default="主脉")
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
|
||
|
||
class Message(Base):
|
||
"""消息：content 为 canonical ContentBlock JSON（本切片为 Text/Markdown 子集）。"""
|
||
|
||
__tablename__ = "message"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True, default=lambda: new_id("message_"))
|
||
conversation_id: Mapped[str] = mapped_column(
|
||
ForeignKey("conversation.id", ondelete="cascade"), nullable=False, index=True
|
||
)
|
||
branch_id: Mapped[str] = mapped_column(
|
||
ForeignKey("branch.id", ondelete="cascade"), nullable=False, index=True
|
||
)
|
||
role: Mapped[str] = mapped_column(String, nullable=False)
|
||
content: Mapped[list[dict[str, Any]]] = mapped_column(JSONB, nullable=False)
|
||
parser_version: Mapped[str | None] = mapped_column(String, nullable=True)
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
|
||
__table_args__ = (
|
||
CheckConstraint("role IN ('user', 'assistant', 'system', 'tool')", name="role_values"),
|
||
)
|
||
|
||
|
||
class Run(Base):
|
||
"""Agent 执行：状态机见 Agent 运行时第 3 节；本切片空转即完成。"""
|
||
|
||
__tablename__ = "run"
|
||
|
||
id: Mapped[str] = mapped_column(String, primary_key=True, default=lambda: new_id("run_"))
|
||
personal_domain_id: Mapped[str] = mapped_column(
|
||
ForeignKey("personal_domain.id", ondelete="cascade"), nullable=False, index=True
|
||
)
|
||
conversation_id: Mapped[str | None] = mapped_column(
|
||
ForeignKey("conversation.id", ondelete="cascade"), nullable=True, index=True
|
||
)
|
||
status: Mapped[str] = mapped_column(String, nullable=False, default="queued")
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
completed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
|
||
|
||
__table_args__ = (
|
||
CheckConstraint(
|
||
"status IN ('queued', 'running', 'waiting_approval', "
|
||
"'completed', 'failed', 'cancelled')",
|
||
name="status_values",
|
||
),
|
||
Index("ix_run_domain_status", "personal_domain_id", "status"),
|
||
)
|
||
|
||
|
||
class IdempotencyRecord(Base):
|
||
"""幂等键记录：按 认证主体+路由+键 隔离，保存请求哈希与结果引用（契约第 6 节）。"""
|
||
|
||
__tablename__ = "idempotency_record"
|
||
|
||
key: Mapped[str] = mapped_column(String, primary_key=True)
|
||
owner_domain_id: Mapped[str] = mapped_column(
|
||
ForeignKey("personal_domain.id", ondelete="cascade"), nullable=False
|
||
)
|
||
route: Mapped[str] = mapped_column(String, nullable=False)
|
||
request_hash: Mapped[str] = mapped_column(String, nullable=False)
|
||
response_status: Mapped[int] = mapped_column(nullable=False)
|
||
resource_ids: Mapped[dict[str, Any]] = mapped_column(JSONB, nullable=False, default=dict)
|
||
created_at: Mapped[datetime] = mapped_column(
|
||
DateTime(timezone=True), nullable=False, server_default=func.now()
|
||
)
|
||
|
||
__table_args__ = (
|
||
Index("uq_idempotency_owner_route_key", "owner_domain_id", "route", "key", unique=True),
|
||
)
|