musehub_collaborator_models.py
python
sha256:f65847c6a4ae29872f3ccbc2420f91a8948949b84a06320bdaf2ac281c89ff8a
docs(F7b): governance sync — BUILT awaiting Gabriel; carry …
Human
patch
26 days ago
| 1 | """SQLAlchemy ORM model for MuseHub collaborators. |
| 2 | |
| 3 | Collaborators are users granted explicit push/admin access to a repo beyond |
| 4 | the owner. Permission levels: read | write | admin (default: write). |
| 5 | """ |
| 6 | |
| 7 | from datetime import datetime, timezone |
| 8 | |
| 9 | from sqlalchemy import DateTime, ForeignKey, Index, String, UniqueConstraint |
| 10 | from sqlalchemy.orm import Mapped, MappedAsDataclass, mapped_column |
| 11 | |
| 12 | from musehub.db.database import Base |
| 13 | |
| 14 | def _utc_now() -> datetime: |
| 15 | return datetime.now(tz=timezone.utc) |
| 16 | |
| 17 | class MusehubCollaborator(MappedAsDataclass, Base): |
| 18 | """A collaborator record granting a user explicit access to a repo. |
| 19 | |
| 20 | ``permission`` is one of "read" | "write" | "admin"; defaults to "write". |
| 21 | ``invited_by_handle`` references the identity handle who extended the invitation (nullable |
| 22 | some collaborators may be added programmatically without an inviter). |
| 23 | ``accepted_at`` is null until the invited user explicitly accepts. |
| 24 | |
| 25 | ``id`` is genesis-addressed: sha256(repo_id NUL identity_id NUL created_at_iso). |
| 26 | """ |
| 27 | |
| 28 | __tablename__ = "musehub_collaborators" |
| 29 | __table_args__ = ( |
| 30 | UniqueConstraint("repo_id", "identity_handle", name="uq_musehub_collaborators_repo_identity"), |
| 31 | Index("ix_musehub_collaborators_repo_id", "repo_id"), |
| 32 | Index("ix_musehub_collaborators_identity_handle", "identity_handle"), |
| 33 | ) |
| 34 | |
| 35 | # --- Required fields --- |
| 36 | id: Mapped[str] = mapped_column(String(128), primary_key=True) |
| 37 | repo_id: Mapped[str] = mapped_column( |
| 38 | String(128), |
| 39 | ForeignKey("musehub_repos.repo_id", ondelete="CASCADE"), |
| 40 | nullable=False, |
| 41 | ) |
| 42 | identity_handle: Mapped[str] = mapped_column(String(64), nullable=False) |
| 43 | |
| 44 | # --- Optional fields with Python-side defaults --- |
| 45 | # Permission level: "read" | "write" | "admin" |
| 46 | permission: Mapped[str] = mapped_column(String(20), nullable=False, default="write", server_default="write") |
| 47 | invited_by_handle: Mapped[str | None] = mapped_column(String(64), nullable=True, default=None) |
| 48 | invited_at: Mapped[datetime] = mapped_column( |
| 49 | DateTime(timezone=True), nullable=False, default_factory=_utc_now |
| 50 | ) |
| 51 | # Null until the invited user accepts the invitation |
| 52 | accepted_at: Mapped[datetime | None] = mapped_column( |
| 53 | DateTime(timezone=True), nullable=True, default=None |
| 54 | ) |
File History
2 commits
sha256:f65847c6a4ae29872f3ccbc2420f91a8948949b84a06320bdaf2ac281c89ff8a
docs(F7b): governance sync — BUILT awaiting Gabriel; carry …
Human
patch
26 days ago
sha256:417c976b0b9320bb758749eb014d9087354fa3186e2abd2fc949e74a670237e7
merge(F7b B1): carry overseer provenance onto dev; resolve …
Human
minor
⚠
26 days ago