bvandeusenandClaude Opus 5.5
a51a563fe7
CI & Build / Python lint (push) Successful in 2s
CI & Build / Build now, or wait for Android? (push) Successful in 2s
Android / Build, or is the channel already serving this? (push) Successful in 3s
Android / Core and FFI clippy and tests (push) Skipped
Android / Kotlin + Rust (APK) (push) Skipped
Desktop (Tauri) / Build, or is the channel already serving this? (push) Successful in 2s
CI & Build / Web typecheck and unit tests (push) Successful in 9s
CI & Build / Python tests (push) Successful in 13s
Android / Build the server image (push) Skipped
Desktop (Tauri) / Web tests, clippy, Rust tests and rustfmt (push) Skipped
Desktop (Tauri) / Tauri desktop (Linux) (push) Skipped
Desktop (Tauri) / Windows installer (cross-compiled) (push) Skipped
Desktop (Tauri) / Update manifest (push) Skipped
CI & Build / integration (push) Successful in 1m30s
CI & Build / Build & push image (push) Successful in 32s
Rule 32 "Comments describe the product to a stranger" sweep over src/, alembic/ and tests/. Comments and docstrings now say what the code does and the reason as a present-tense constraint, briefly. Removed: - issue, task, note, rule, milestone and family-idea references - "used to" / before-and-after narration - quotes of decisions and incident stories from the deploying instance - paragraph-length arguments, where a line or two carries the fact Kept every hazard as a present-tense fact, e.g. timing oracles, the proxy hop direction, and migrations that must stay frozen. Also: - Three test names lose "still"/"used to"/"pre_m304" phrasing. - pyproject's description drops "FabledSword family". The history these comments carried stays in Scribe and in git log. A comment-stripping diff (Scribe snippet #6226 "codeonly.py — prove a diff changed only comments") shows no code changed apart from the renamed tests and the description string. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
81 lines
3.5 KiB
Python
81 lines
3.5 KiB
Python
"""foundation: users, groups, group_members, shares
|
|
|
|
Revision ID: 0001
|
|
Revises:
|
|
Create Date: 2026-07-19
|
|
|
|
Identity and the sharing ACL. The shares table is polymorphic, so any shareable
|
|
entity uses it.
|
|
"""
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
from sqlalchemy.dialects.postgresql import CITEXT, UUID
|
|
|
|
revision = "0001"
|
|
down_revision = None
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.execute("CREATE EXTENSION IF NOT EXISTS citext")
|
|
|
|
op.create_table(
|
|
"users",
|
|
sa.Column("id", UUID(as_uuid=True), primary_key=True),
|
|
sa.Column("email", CITEXT(), nullable=False, unique=True),
|
|
sa.Column("email_verified", sa.Boolean(), nullable=False, server_default=sa.false()),
|
|
sa.Column("password_hash", sa.Text(), nullable=True),
|
|
sa.Column("display_name", sa.Text(), nullable=False),
|
|
sa.Column("avatar_path", sa.Text(), nullable=True),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
|
sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
|
)
|
|
op.create_index("ix_users_email", "users", ["email"])
|
|
|
|
op.create_table(
|
|
"groups",
|
|
sa.Column("id", UUID(as_uuid=True), primary_key=True),
|
|
sa.Column("name", sa.Text(), nullable=False),
|
|
sa.Column("owner_id", UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="SET NULL"), nullable=True),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
|
)
|
|
|
|
op.create_table(
|
|
"group_members",
|
|
sa.Column("id", UUID(as_uuid=True), primary_key=True),
|
|
sa.Column("group_id", UUID(as_uuid=True), sa.ForeignKey("groups.id", ondelete="CASCADE"), nullable=False),
|
|
sa.Column("user_id", UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="CASCADE"), nullable=False),
|
|
sa.Column("role", sa.Text(), nullable=False, server_default="member"),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
|
sa.UniqueConstraint("group_id", "user_id", name="uq_group_members_group_user"),
|
|
)
|
|
op.create_index("ix_group_members_user", "group_members", ["user_id"])
|
|
|
|
op.create_table(
|
|
"shares",
|
|
sa.Column("id", UUID(as_uuid=True), primary_key=True),
|
|
sa.Column("resource_type", sa.Text(), nullable=False),
|
|
sa.Column("resource_id", UUID(as_uuid=True), nullable=False),
|
|
sa.Column("shared_with_user_id", UUID(as_uuid=True), sa.ForeignKey("users.id", ondelete="CASCADE"), nullable=True),
|
|
sa.Column("shared_with_group_id", UUID(as_uuid=True), sa.ForeignKey("groups.id", ondelete="CASCADE"), nullable=True),
|
|
sa.Column("permission", sa.Text(), nullable=False, server_default="view"),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
|
|
sa.CheckConstraint(
|
|
"(shared_with_user_id IS NOT NULL) <> (shared_with_group_id IS NOT NULL)",
|
|
name="ck_shares_one_target",
|
|
),
|
|
)
|
|
op.create_index("ix_shares_resource", "shares", ["resource_type", "resource_id"])
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_index("ix_shares_resource", table_name="shares")
|
|
op.drop_table("shares")
|
|
op.drop_index("ix_group_members_user", table_name="group_members")
|
|
op.drop_table("group_members")
|
|
op.drop_table("groups")
|
|
op.drop_index("ix_users_email", table_name="users")
|
|
op.drop_table("users")
|
|
# citext extension is left installed — it may be in use elsewhere.
|