v2 foundation: shared contracts, app profile schema, wiring stubs

- projects: app profile columns + one app per org; project_external_git, deploy_targets, org_model_grants tables (migration a0f0e1d2c3b4) - ports + fakes: RepoWorkspace, DeliveryHooks, DeployTarget, Memory, ModelGrants, WorkforceBootstrap; AppProfile + AppProfileRepository - per-workstream wiring (container_org/engine/delivery), config blocks, empty routers, delivery worker, MCP/delivery service shells, web stubs - admin nav derives from ADMIN_ITEMS; plan docs updated for ext4 worktrees Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-13 23:21:17 +03:30
parent 3a68b0fa07
commit 0cd9194b64
58 changed files with 1576 additions and 26 deletions
@@ -0,0 +1,126 @@
+"""v2 foundation: app profile, one app per org, external git, deploy targets, model grants
+
+Revision ID: a0f0e1d2c3b4
+Revises: d4e5f6a7b8c9
+Create Date: 2026-10-13 22:30:00.000000
+"""
+
+from __future__ import annotations
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "a0f0e1d2c3b4"
+down_revision: str | None = "d4e5f6a7b8c9"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+_PROFILE_COLUMNS: list[sa.Column] = [
+    sa.Column("app_type", sa.String(length=32), nullable=True),
+    sa.Column("language", sa.String(length=32), nullable=True),
+    sa.Column("framework", sa.String(length=48), nullable=True),
+    sa.Column("runtime_version", sa.String(length=32), nullable=True),
+    sa.Column("package_manager", sa.String(length=32), nullable=True),
+    sa.Column("setup_command", sa.Text(), nullable=True),
+    sa.Column("build_command", sa.Text(), nullable=True),
+    sa.Column("test_command", sa.Text(), nullable=True),
+    sa.Column("start_command", sa.Text(), nullable=True),
+    sa.Column("app_port", sa.Integer(), nullable=True),
+    sa.Column("healthcheck_path", sa.String(length=255), nullable=False, server_default="/"),
+    sa.Column("git_source", sa.String(length=16), nullable=False, server_default="platform"),
+    sa.Column("external_repo_url", sa.String(length=512), nullable=True),
+    sa.Column("wizard_completed_at", sa.DateTime(timezone=True), nullable=True),
+]
+
+
+def upgrade() -> None:
+    with op.batch_alter_table("projects") as batch:
+        for column in _PROFILE_COLUMNS:
+            batch.add_column(column)
+        batch.create_unique_constraint("uq_project_one_per_org", ["organization_id"])
+
+    op.create_table(
+        "project_external_git",
+        sa.Column(
+            "project_id",
+            sa.String(length=32),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            primary_key=True,
+        ),
+        sa.Column("auth_type", sa.String(length=16), nullable=False, server_default="none"),
+        sa.Column("username", sa.String(length=160), nullable=True),
+        sa.Column("secret_encrypted", sa.Text(), nullable=True),
+        sa.Column("known_hosts", sa.Text(), nullable=True),
+        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
+    )
+
+    op.create_table(
+        "deploy_targets",
+        sa.Column("id", sa.String(length=32), primary_key=True),
+        sa.Column(
+            "organization_id",
+            sa.String(length=32),
+            sa.ForeignKey("organizations.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "project_id",
+            sa.String(length=32),
+            sa.ForeignKey("projects.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("kind", sa.String(length=8), nullable=False),
+        sa.Column("host", sa.String(length=255), nullable=False),
+        sa.Column("port", sa.Integer(), nullable=False),
+        sa.Column("username", sa.String(length=160), nullable=False),
+        sa.Column("auth_type", sa.String(length=16), nullable=False, server_default="password"),
+        sa.Column("secret_encrypted", sa.Text(), nullable=True),
+        sa.Column("remote_path", sa.String(length=512), nullable=False),
+        sa.Column("post_deploy_command", sa.Text(), nullable=True),
+        sa.Column("host_fingerprint", sa.String(length=255), nullable=True),
+        sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.true()),
+        sa.Column("last_tested_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("last_test_ok", sa.Boolean(), nullable=True),
+        sa.Column("last_test_message", sa.String(length=500), nullable=True),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+    )
+    op.create_index("ix_deploy_targets_organization_id", "deploy_targets", ["organization_id"])
+    op.create_index("ix_deploy_target_project", "deploy_targets", ["project_id"])
+
+    op.create_table(
+        "org_model_grants",
+        sa.Column("id", sa.String(length=32), primary_key=True),
+        sa.Column(
+            "organization_id",
+            sa.String(length=32),
+            sa.ForeignKey("organizations.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column(
+            "ai_model_id",
+            sa.String(length=32),
+            sa.ForeignKey("ai_models.id", ondelete="CASCADE"),
+            nullable=False,
+        ),
+        sa.Column("daily_credit_cap", sa.Float(), nullable=True),
+        sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.true()),
+        sa.Column("created_by_user_id", sa.String(length=32), sa.ForeignKey("users.id")),
+        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
+        sa.UniqueConstraint("organization_id", "ai_model_id", name="uq_org_model_grant"),
+    )
+    op.create_index("ix_org_model_grants_organization_id", "org_model_grants", ["organization_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_org_model_grants_organization_id", table_name="org_model_grants")
+    op.drop_table("org_model_grants")
+    op.drop_index("ix_deploy_target_project", table_name="deploy_targets")
+    op.drop_index("ix_deploy_targets_organization_id", table_name="deploy_targets")
+    op.drop_table("deploy_targets")
+    op.drop_table("project_external_git")
+    with op.batch_alter_table("projects") as batch:
+        batch.drop_constraint("uq_project_one_per_org", type_="unique")
+        for column in reversed(_PROFILE_COLUMNS):
+            batch.drop_column(column.name)