chore: align sqlite control plane architecture

- replace default Convex control-plane wording with Rust SQLite control-plane across architecture, AGENTS, Reasonix, and design docs - retire root Convex functions source and deploy script into recycle while keeping explicit cloud/compat/sync-replica boundaries - add control-plane migration guard/docs and keep CodeGraph refreshed after the SQLite control-plane cutover
2026-05-22 17:45:22 +08:00
parent 531e845600
commit 47e224d419
79 changed files with 7634 additions and 2600 deletions
@@ -0,0 +1,348 @@
+//! SQLite 控制面 Phase 1 的最小数据模型。
+
+use serde::{Deserialize, Serialize};
+use sha2::{Digest, Sha256};
+
+pub type EntityId = String;
+pub type Timestamp = String;
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct UserRecord {
+    pub id: EntityId,
+    pub email: Option<String>,
+    pub username: String,
+    pub display_name: String,
+    pub role: String,
+    pub status: String,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+pub fn session_token_hash(raw_token: &str) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(raw_token.as_bytes());
+    hex::encode(hasher.finalize())
+}
+
+pub fn password_hash_v1(password: &str) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(b"mnote-password-v1:");
+    hasher.update(password.as_bytes());
+    format!("sha256-v1:{}", hex::encode(hasher.finalize()))
+}
+
+pub fn share_token_hash_v1(token: &str) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(b"mnote-share-token-v1:");
+    hasher.update(token.as_bytes());
+    format!("sha256-v1:{}", hex::encode(hasher.finalize()))
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct UpsertUserInput {
+    pub id: Option<EntityId>,
+    pub email: Option<String>,
+    pub username: String,
+    pub display_name: String,
+    pub role: Option<String>,
+    pub password_hash: Option<String>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct CreatePasswordIdentityInput {
+    pub user_id: EntityId,
+    pub email: Option<String>,
+    pub username: String,
+    pub password: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AuthenticatePasswordInput {
+    pub account: String,
+    pub password: String,
+    pub session_id: Option<EntityId>,
+    pub token_hash: String,
+    pub user_agent: Option<String>,
+    pub ip_hash: Option<String>,
+    pub expires_at: Option<Timestamp>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AuthSessionRecord {
+    pub id: EntityId,
+    pub user_id: EntityId,
+    pub token_hash: String,
+    pub user_agent: Option<String>,
+    pub ip_hash: Option<String>,
+    pub created_at: Timestamp,
+    pub expires_at: Timestamp,
+    pub revoked_at: Option<Timestamp>,
+    pub last_seen_at: Timestamp,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct CreateSessionInput {
+    pub id: Option<EntityId>,
+    pub user_id: EntityId,
+    pub token_hash: String,
+    pub user_agent: Option<String>,
+    pub ip_hash: Option<String>,
+    pub expires_at: Option<Timestamp>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct ResolvedAuthSession {
+    pub session: AuthSessionRecord,
+    pub user: UserRecord,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct WorkspaceRecord {
+    pub id: EntityId,
+    pub owner_user_id: EntityId,
+    pub name: String,
+    pub kind: String,
+    pub root_uri: String,
+    pub root_path: String,
+    pub source_kind: String,
+    pub status: String,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct DirectoryGrantRecord {
+    pub id: EntityId,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub root_uri: String,
+    pub root_path: String,
+    pub permission: String,
+    pub recursive: bool,
+    pub capabilities_json: String,
+    pub source: String,
+    pub status: String,
+    pub created_by: Option<EntityId>,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct DirectoryGrantLookup {
+    pub grant_id: Option<EntityId>,
+    pub user_id: Option<EntityId>,
+    pub root_uri: Option<String>,
+    pub include_revoked: bool,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct DirectoryGrantInput {
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub root_uri: String,
+    pub root_path: String,
+    pub permission: String,
+    pub recursive: bool,
+    pub capabilities: Vec<String>,
+    pub source: String,
+    pub created_by: Option<EntityId>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct ResolvedAccess {
+    pub user_id: EntityId,
+    pub root_uri: String,
+    pub permission: String,
+    pub grant_ids: Vec<EntityId>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct OutboxEventRecord {
+    pub id: EntityId,
+    pub topic: String,
+    pub event_type: String,
+    pub payload_json: String,
+    pub created_at: Timestamp,
+    pub delivered_at: Option<Timestamp>,
+    pub attempts: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct OutboxEventInput {
+    pub topic: String,
+    pub event_type: String,
+    pub payload_json: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiPolicyRecord {
+    pub id: EntityId,
+    pub user_id: Option<EntityId>,
+    pub workspace_id: Option<EntityId>,
+    pub allowed_roots_json: String,
+    pub model_policy_json: String,
+    pub quota_json: String,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct UpsertAiPolicyInput {
+    pub id: Option<EntityId>,
+    pub user_id: Option<EntityId>,
+    pub workspace_id: Option<EntityId>,
+    pub allowed_roots_json: String,
+    pub model_policy_json: String,
+    pub quota_json: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct SyncStateRecord {
+    pub id: EntityId,
+    pub workspace_id: EntityId,
+    pub remote_kind: String,
+    pub remote_id: Option<String>,
+    pub cursor: Option<String>,
+    pub last_synced_at: Option<Timestamp>,
+    pub status: String,
+    pub error_json: Option<String>,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct UpsertSyncStateInput {
+    pub id: Option<EntityId>,
+    pub workspace_id: EntityId,
+    pub remote_kind: String,
+    pub remote_id: Option<String>,
+    pub cursor: Option<String>,
+    pub last_synced_at: Option<Timestamp>,
+    pub status: String,
+    pub error_json: Option<String>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiRuntimeRunRecord {
+    pub id: EntityId,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub document_id: Option<String>,
+    pub session_id: EntityId,
+    pub run_id: EntityId,
+    pub title: Option<String>,
+    pub profile: String,
+    pub acp_runtime: String,
+    pub trace_id: Option<String>,
+    pub status: String,
+    pub runtime_json: String,
+    pub payload_json: String,
+    pub deleted_at: Option<Timestamp>,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct UpsertAiRuntimeRunInput {
+    pub id: Option<EntityId>,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub document_id: Option<String>,
+    pub session_id: EntityId,
+    pub run_id: EntityId,
+    pub title: Option<String>,
+    pub profile: String,
+    pub acp_runtime: String,
+    pub trace_id: Option<String>,
+    pub status: String,
+    pub runtime_json: String,
+    pub payload_json: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AiRuntimeEventRecord {
+    pub id: EntityId,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub document_id: Option<String>,
+    pub session_id: EntityId,
+    pub run_id: EntityId,
+    pub profile: String,
+    pub acp_runtime: String,
+    pub event_type: String,
+    pub payload_json: String,
+    pub created_at: Timestamp,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AppendAiRuntimeEventInput {
+    pub id: Option<EntityId>,
+    pub user_id: EntityId,
+    pub workspace_id: Option<EntityId>,
+    pub document_id: Option<String>,
+    pub session_id: EntityId,
+    pub run_id: EntityId,
+    pub profile: String,
+    pub acp_runtime: String,
+    pub event_type: String,
+    pub payload_json: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct ShareLinkRecord {
+    pub id: EntityId,
+    pub workspace_id: EntityId,
+    pub resource_kind: String,
+    pub resource_id: String,
+    pub token_hash: String,
+    pub permission: String,
+    pub created_by: EntityId,
+    pub expires_at: Option<Timestamp>,
+    pub revoked_at: Option<Timestamp>,
+    pub created_at: Timestamp,
+    pub updated_at: Timestamp,
+    pub revision: i64,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct CreateShareLinkInput {
+    pub id: Option<EntityId>,
+    pub workspace_id: EntityId,
+    pub resource_kind: String,
+    pub resource_id: String,
+    pub token: Option<String>,
+    pub permission: String,
+    pub created_by: EntityId,
+    pub expires_at: Option<Timestamp>,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct CreatedShareLink {
+    pub link: ShareLinkRecord,
+    pub token: String,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AuditLogRecord {
+    pub id: EntityId,
+    pub actor_user_id: Option<EntityId>,
+    pub action: String,
+    pub target_kind: String,
+    pub target_id: Option<EntityId>,
+    pub metadata_json: String,
+    pub created_at: Timestamp,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+pub struct AppendAuditInput {
+    pub actor_user_id: Option<EntityId>,
+    pub action: String,
+    pub target_kind: String,
+    pub target_id: Option<EntityId>,
+    pub metadata_json: String,
+}