Files
breakpilot-compliance/backend-compliance/compliance/db/template_rule_models.py
T
Benjamin Admin bb183b0e75
CI / detect-changes (push) Successful in 12s
CI / branch-name (push) Has been skipped
CI / test-python-backend (push) Successful in 33s
CI / test-python-document-crawler (push) Successful in 23s
CI / test-python-dsms-gateway (push) Successful in 19s
CI / guardrail-integrity (push) Has been skipped
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / build-sha-integrity (push) Failing after 7s
CI / validate-canonical-controls (push) Successful in 16s
CI / loc-budget (push) Failing after 18s
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / nodejs-build (push) Successful in 2m27s
CI / test-go (push) Failing after 46s
CI / iace-gt-coverage (push) Successful in 25s
feat(template-rules): backend foundation for profile-based document recommendations
Introduces the sustainable backend replacement for the hardcoded inline rules in
admin-compliance/app/sdk/document-generator/templateRecommendations.ts.

What's in this commit (Phase 1.1 - 1.5 of the rustling-yawning-boot plan):

- Migration 147: 4 new tables
  - compliance_template_rules (rule shell, document_type, current_version_id)
  - compliance_template_rule_versions (lifecycle, JSONB conditions,
    source_citation, change_summary, approval timestamps)
  - compliance_template_rule_approvals (audit trail)
  - compliance_tenant_rule_overrides (per-tenant classification overrides)
  Plus partial unique index for "only one is_live=1 version per rule".

- SQLAlchemy models: TemplateRuleDB, TemplateRuleVersionDB,
  TemplateRuleApprovalDB, TenantRuleOverrideDB (compliance/db/).

- Pydantic schemas (compliance/schemas/template_rule.py): full request/response
  set including RecommendationRequest/Result with reasons and override tracking.

- TemplateRuleService (compliance/services/): CRUD + Lifecycle transitions
  (submit_for_review/approve/publish/reject) following legal_document_service.py
  pattern with _transition() helper and approval audit trail. Plus tenant
  override upsert.

- RecommendationService: condition evaluator (eq, neq, in, not_in, gte/lte/gt/lt,
  exists, truthy) over JSONB conditions, override application, reason generation
  for human-readable explanations in workspace UI.

- 18 FastAPI routes in compliance/api/template_rule_routes.py covering rule CRUD,
  version lifecycle, override management and POST /recommend evaluation endpoint.

- Seed data: 33 initial rules ported from templateRecommendations.ts in
  compliance/data/template_rule_seed_data.py, written as published versions
  on first seed run. Idempotent via rule_key.

Phase 1.6 (pytest suite) and Phase 2 (editorial UI in admin-compliance) follow
in separate commits.

[migration-approved]

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-06-06 23:13:50 +02:00

138 lines
4.7 KiB
Python

"""
SQLAlchemy models for Compliance Template Rules — profilbasierte
Empfehlungs-Regeln mit Versionierung, Approval-Workflow und Tenant-Overrides.
Tables:
- compliance_template_rules: Regel-Hülle
- compliance_template_rule_versions: Versionen mit Lifecycle
- compliance_template_rule_approvals: Audit-Trail
- compliance_tenant_rule_overrides: Pro-Tenant-Overrides globaler Regeln
"""
import uuid
from datetime import datetime
from sqlalchemy import (
Column, String, Text, SmallInteger, Integer, DateTime, Index, ForeignKey,
)
from sqlalchemy.dialects.postgresql import UUID, JSONB
from classroom_engine.database import Base
class TemplateRuleDB(Base):
"""Regel-Hülle: 1 Regel = 1 Empfehlung für ein document_type."""
__tablename__ = 'compliance_template_rules'
id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
rule_key = Column(String(150), nullable=False, unique=True)
document_type = Column(String(100), nullable=False)
title = Column(String(300), nullable=False)
current_version_id = Column(UUID(as_uuid=True))
created_at = Column(DateTime, default=datetime.utcnow, nullable=False)
updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
__table_args__ = (
Index('idx_template_rules_type', 'document_type'),
)
def __repr__(self) -> str:
return f"<TemplateRule {self.rule_key}{self.document_type}>"
class TemplateRuleVersionDB(Base):
"""Eine Version einer Regel mit Lifecycle (draft → review → approved → published)."""
__tablename__ = 'compliance_template_rule_versions'
id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
rule_id = Column(
UUID(as_uuid=True),
ForeignKey('compliance_template_rules.id', ondelete='CASCADE'),
nullable=False,
)
version_number = Column(Integer, nullable=False)
status = Column(String(20), default='draft', nullable=False)
is_live = Column(SmallInteger, default=0, nullable=False)
classification = Column(String(20), nullable=False)
conditions = Column(JSONB, nullable=False, default=dict)
source_citation = Column(Text, nullable=False, default='')
rationale = Column(Text)
change_summary = Column(Text)
created_by = Column(String(200))
submitted_by = Column(String(200))
submitted_at = Column(DateTime)
approved_by = Column(String(200))
approved_at = Column(DateTime)
published_by = Column(String(200))
published_at = Column(DateTime)
rejected_by = Column(String(200))
rejected_at = Column(DateTime)
rejection_reason = Column(Text)
created_at = Column(DateTime, default=datetime.utcnow, nullable=False)
updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
__table_args__ = (
Index('idx_rule_versions_rule', 'rule_id'),
Index('idx_rule_versions_status', 'status'),
)
def __repr__(self) -> str:
return f"<TemplateRuleVersion v{self.version_number} [{self.status}]>"
class TemplateRuleApprovalDB(Base):
"""Audit-Trail aller Lifecycle-Aktionen auf einer Regel-Version."""
__tablename__ = 'compliance_template_rule_approvals'
id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
version_id = Column(
UUID(as_uuid=True),
ForeignKey('compliance_template_rule_versions.id', ondelete='CASCADE'),
nullable=False,
)
action = Column(String(50), nullable=False)
approver = Column(String(200))
comment = Column(Text)
created_at = Column(DateTime, default=datetime.utcnow, nullable=False)
__table_args__ = (
Index('idx_rule_approvals_version', 'version_id'),
)
def __repr__(self) -> str:
return f"<TemplateRuleApproval {self.action} on {self.version_id}>"
class TenantRuleOverrideDB(Base):
"""Override einer globalen Regel pro Tenant/Kanzlei."""
__tablename__ = 'compliance_tenant_rule_overrides'
id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
tenant_id = Column(String(100), nullable=False)
rule_id = Column(
UUID(as_uuid=True),
ForeignKey('compliance_template_rules.id', ondelete='CASCADE'),
nullable=False,
)
override_classification = Column(String(20)) # null = deaktiviert
reason = Column(Text, nullable=False)
created_by = Column(String(200))
created_at = Column(DateTime, default=datetime.utcnow, nullable=False)
updated_at = Column(DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
__table_args__ = (
Index('idx_tenant_overrides_tenant', 'tenant_id'),
)
def __repr__(self) -> str:
return f"<TenantRuleOverride tenant={self.tenant_id} rule={self.rule_id}>"