feat: 添加审批系统和遗留查询功能支持 - 添加审批系统,包括审批请求模型、服务和路由,支持创建、批准和拒绝操作 - 实现审批API密钥验证机制,区分普通API和审批API访问权限 - 添加Alembic数据库迁移支持,更新初始schema版本并添加降级保护 - 配置遗留MySQL查询白名单机制,支持命名查询和参数化查询 - 更新业务服务以集成审批流程,高风险操作需要审批票证 - 调整安全认证使用常量定义的HTTP头,增强安全性比较 - 优化.gitignore配置,添加日志目录排除和文档文件包含规则 - 更新Dockerfile添加alembic依赖包,修复OpenClaw适配器错误处理 ```
35 lines
1.7 KiB
Python
35 lines
1.7 KiB
Python
from datetime import datetime
|
|
|
|
from sqlalchemy import DateTime, Integer, String, Text
|
|
from sqlalchemy.orm import Mapped, mapped_column
|
|
|
|
from app.core.constants import ActorValue
|
|
from app.core.db_base import Base
|
|
from app.core.time import utc_now
|
|
from app.modules.approvals.constants import ApprovalStatus
|
|
|
|
|
|
class ApprovalRequest(Base):
|
|
__tablename__ = "approval_requests"
|
|
|
|
id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True)
|
|
ticket_id: Mapped[str] = mapped_column(String(64), unique=True, index=True)
|
|
domain: Mapped[str] = mapped_column(String(128), index=True)
|
|
record_id: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
action: Mapped[str] = mapped_column(String(128), index=True)
|
|
applicant: Mapped[str] = mapped_column(String(128), default=ActorValue.API, index=True)
|
|
approver: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
status: Mapped[str] = mapped_column(String(32), default=ApprovalStatus.PENDING, index=True)
|
|
reason: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
payload: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
decision_comment: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
used_by: Mapped[str | None] = mapped_column(String(128), nullable=True, index=True)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime, default=utc_now, index=True)
|
|
updated_at: Mapped[datetime] = mapped_column(
|
|
DateTime,
|
|
default=utc_now,
|
|
onupdate=utc_now,
|
|
)
|
|
decided_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|
|
used_at: Mapped[datetime | None] = mapped_column(DateTime, nullable=True)
|