v2 foundation: shared contracts, app profile schema, wiring stubs

- projects: app profile columns + one app per org; project_external_git,
  deploy_targets, org_model_grants tables (migration a0f0e1d2c3b4)
- ports + fakes: RepoWorkspace, DeliveryHooks, DeployTarget, Memory,
  ModelGrants, WorkforceBootstrap; AppProfile + AppProfileRepository
- per-workstream wiring (container_org/engine/delivery), config blocks,
  empty routers, delivery worker, MCP/delivery service shells, web stubs
- admin nav derives from ADMIN_ITEMS; plan docs updated for ext4 worktrees

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
mjalmoudy94
2026-10-13 23:21:17 +03:30
co-authored by Claude Sonnet 5.5
parent 3a68b0fa07
commit 0cd9194b64
58 changed files with 1576 additions and 26 deletions
@@ -0,0 +1,126 @@
"""v2 foundation: app profile, one app per org, external git, deploy targets, model grants
Revision ID: a0f0e1d2c3b4
Revises: d4e5f6a7b8c9
Create Date: 2026-10-13 22:30:00.000000
"""
from __future__ import annotations
from collections.abc import Sequence
import sqlalchemy as sa
from alembic import op
revision: str = "a0f0e1d2c3b4"
down_revision: str | None = "d4e5f6a7b8c9"
branch_labels: str | Sequence[str] | None = None
depends_on: str | Sequence[str] | None = None
_PROFILE_COLUMNS: list[sa.Column] = [
sa.Column("app_type", sa.String(length=32), nullable=True),
sa.Column("language", sa.String(length=32), nullable=True),
sa.Column("framework", sa.String(length=48), nullable=True),
sa.Column("runtime_version", sa.String(length=32), nullable=True),
sa.Column("package_manager", sa.String(length=32), nullable=True),
sa.Column("setup_command", sa.Text(), nullable=True),
sa.Column("build_command", sa.Text(), nullable=True),
sa.Column("test_command", sa.Text(), nullable=True),
sa.Column("start_command", sa.Text(), nullable=True),
sa.Column("app_port", sa.Integer(), nullable=True),
sa.Column("healthcheck_path", sa.String(length=255), nullable=False, server_default="/"),
sa.Column("git_source", sa.String(length=16), nullable=False, server_default="platform"),
sa.Column("external_repo_url", sa.String(length=512), nullable=True),
sa.Column("wizard_completed_at", sa.DateTime(timezone=True), nullable=True),
]
def upgrade() -> None:
with op.batch_alter_table("projects") as batch:
for column in _PROFILE_COLUMNS:
batch.add_column(column)
batch.create_unique_constraint("uq_project_one_per_org", ["organization_id"])
op.create_table(
"project_external_git",
sa.Column(
"project_id",
sa.String(length=32),
sa.ForeignKey("projects.id", ondelete="CASCADE"),
primary_key=True,
),
sa.Column("auth_type", sa.String(length=16), nullable=False, server_default="none"),
sa.Column("username", sa.String(length=160), nullable=True),
sa.Column("secret_encrypted", sa.Text(), nullable=True),
sa.Column("known_hosts", sa.Text(), nullable=True),
sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
)
op.create_table(
"deploy_targets",
sa.Column("id", sa.String(length=32), primary_key=True),
sa.Column(
"organization_id",
sa.String(length=32),
sa.ForeignKey("organizations.id", ondelete="CASCADE"),
nullable=False,
),
sa.Column(
"project_id",
sa.String(length=32),
sa.ForeignKey("projects.id", ondelete="CASCADE"),
nullable=False,
),
sa.Column("kind", sa.String(length=8), nullable=False),
sa.Column("host", sa.String(length=255), nullable=False),
sa.Column("port", sa.Integer(), nullable=False),
sa.Column("username", sa.String(length=160), nullable=False),
sa.Column("auth_type", sa.String(length=16), nullable=False, server_default="password"),
sa.Column("secret_encrypted", sa.Text(), nullable=True),
sa.Column("remote_path", sa.String(length=512), nullable=False),
sa.Column("post_deploy_command", sa.Text(), nullable=True),
sa.Column("host_fingerprint", sa.String(length=255), nullable=True),
sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.true()),
sa.Column("last_tested_at", sa.DateTime(timezone=True), nullable=True),
sa.Column("last_test_ok", sa.Boolean(), nullable=True),
sa.Column("last_test_message", sa.String(length=500), nullable=True),
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
)
op.create_index("ix_deploy_targets_organization_id", "deploy_targets", ["organization_id"])
op.create_index("ix_deploy_target_project", "deploy_targets", ["project_id"])
op.create_table(
"org_model_grants",
sa.Column("id", sa.String(length=32), primary_key=True),
sa.Column(
"organization_id",
sa.String(length=32),
sa.ForeignKey("organizations.id", ondelete="CASCADE"),
nullable=False,
),
sa.Column(
"ai_model_id",
sa.String(length=32),
sa.ForeignKey("ai_models.id", ondelete="CASCADE"),
nullable=False,
),
sa.Column("daily_credit_cap", sa.Float(), nullable=True),
sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.true()),
sa.Column("created_by_user_id", sa.String(length=32), sa.ForeignKey("users.id")),
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
sa.UniqueConstraint("organization_id", "ai_model_id", name="uq_org_model_grant"),
)
op.create_index("ix_org_model_grants_organization_id", "org_model_grants", ["organization_id"])
def downgrade() -> None:
op.drop_index("ix_org_model_grants_organization_id", table_name="org_model_grants")
op.drop_table("org_model_grants")
op.drop_index("ix_deploy_target_project", table_name="deploy_targets")
op.drop_index("ix_deploy_targets_organization_id", table_name="deploy_targets")
op.drop_table("deploy_targets")
op.drop_table("project_external_git")
with op.batch_alter_table("projects") as batch:
batch.drop_constraint("uq_project_one_per_org", type_="unique")
for column in reversed(_PROFILE_COLUMNS):
batch.drop_column(column.name)