82 lines
3.6 KiB
Python
82 lines
3.6 KiB
Python
|
|
"""Create approval_requests and ai_decision_records tables.
|
||
|
|
|
||
|
|
Adds the central approval-request table for agent action approval (F-APPR)
|
||
|
|
and the AI decision-record table for the human-oversight audit trail
|
||
|
|
(F-OVERSIGHT).
|
||
|
|
|
||
|
|
Revision ID: 0123
|
||
|
|
Revises: 0122
|
||
|
|
"""
|
||
|
|
|
||
|
|
from alembic import op
|
||
|
|
import sqlalchemy as sa
|
||
|
|
from sqlalchemy.dialects.postgresql import JSONB, UUID as PGUUID
|
||
|
|
|
||
|
|
revision = "0123"
|
||
|
|
down_revision = "0122"
|
||
|
|
branch_labels = None
|
||
|
|
depends_on = None
|
||
|
|
|
||
|
|
|
||
|
|
def upgrade() -> None:
|
||
|
|
op.create_table(
|
||
|
|
"approval_requests",
|
||
|
|
sa.Column("id", PGUUID(as_uuid=True), primary_key=True),
|
||
|
|
sa.Column("tenant_id", PGUUID(as_uuid=True), nullable=False),
|
||
|
|
sa.Column("entity_type", sa.String(80), nullable=False),
|
||
|
|
sa.Column("entity_id", PGUUID(as_uuid=True), nullable=False),
|
||
|
|
sa.Column("action", sa.String(120), nullable=False),
|
||
|
|
sa.Column("requested_by", PGUUID(as_uuid=True), nullable=False),
|
||
|
|
sa.Column("requested_by_type", sa.String(20), nullable=False, server_default="agent"),
|
||
|
|
sa.Column("approver_id", PGUUID(as_uuid=True), nullable=True),
|
||
|
|
sa.Column("approver_group", sa.String(120), nullable=True),
|
||
|
|
sa.Column("status", sa.String(20), nullable=False, server_default="pending"),
|
||
|
|
sa.Column("comment", sa.Text(), nullable=True),
|
||
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
||
|
|
sa.Column("resolved_at", sa.DateTime(timezone=True), nullable=True),
|
||
|
|
sa.Column("expires_at", sa.DateTime(timezone=True), nullable=True),
|
||
|
|
sa.Column("metadata", JSONB, nullable=False, server_default=sa.text("'{}'::jsonb")),
|
||
|
|
)
|
||
|
|
op.create_index(
|
||
|
|
"ix_approval_requests_tenant_status", "approval_requests", ["tenant_id", "status"]
|
||
|
|
)
|
||
|
|
op.create_index(
|
||
|
|
"ix_approval_requests_tenant_entity",
|
||
|
|
"approval_requests",
|
||
|
|
["tenant_id", "entity_type", "entity_id"],
|
||
|
|
)
|
||
|
|
op.create_index(
|
||
|
|
"ix_approval_requests_tenant_approver",
|
||
|
|
"approval_requests",
|
||
|
|
["tenant_id", "approver_id"],
|
||
|
|
)
|
||
|
|
|
||
|
|
op.create_table(
|
||
|
|
"ai_decision_records",
|
||
|
|
sa.Column("id", PGUUID(as_uuid=True), primary_key=True),
|
||
|
|
sa.Column("tenant_id", PGUUID(as_uuid=True), nullable=False),
|
||
|
|
sa.Column("agent_run_id", PGUUID(as_uuid=True), nullable=False),
|
||
|
|
sa.Column("recommendation", sa.Text(), nullable=False),
|
||
|
|
sa.Column("evidence", JSONB, nullable=False, server_default=sa.text("'{}'::jsonb")),
|
||
|
|
sa.Column("reviewer_id", PGUUID(as_uuid=True), nullable=True),
|
||
|
|
sa.Column("decision", sa.String(20), nullable=True),
|
||
|
|
sa.Column("decision_timestamp", sa.String(40), nullable=True),
|
||
|
|
sa.Column("deviation_note", sa.Text(), nullable=True),
|
||
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
||
|
|
sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
||
|
|
sa.Column("deleted_at", sa.DateTime(timezone=True), nullable=True),
|
||
|
|
sa.Column("owner_id", PGUUID(as_uuid=True), nullable=True),
|
||
|
|
)
|
||
|
|
op.create_index(
|
||
|
|
"ix_ai_decision_records_tenant_run", "ai_decision_records", ["tenant_id", "agent_run_id"]
|
||
|
|
)
|
||
|
|
|
||
|
|
|
||
|
|
def downgrade() -> None:
|
||
|
|
op.drop_index("ix_ai_decision_records_tenant_run", table_name="ai_decision_records")
|
||
|
|
op.drop_table("ai_decision_records")
|
||
|
|
op.drop_index("ix_approval_requests_tenant_approver", table_name="approval_requests")
|
||
|
|
op.drop_index("ix_approval_requests_tenant_entity", table_name="approval_requests")
|
||
|
|
op.drop_index("ix_approval_requests_tenant_status", table_name="approval_requests")
|
||
|
|
op.drop_table("approval_requests")
|