chore: establish local platform baseline

2026-08-26 06:41:54 +08:00
commit 29bdf4900f
575 changed files with 95644 additions and 0 deletions
@@ -0,0 +1,95 @@
+BEGIN;
+
+CREATE TABLE alert_routing_policy (
+    id                         uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+    public_id                  uuid NOT NULL UNIQUE DEFAULT gen_random_uuid(),
+    tenant_id                  uuid NOT NULL REFERENCES tenant(id),
+    category                   varchar(20) NOT NULL CHECK (category IN ('BUSINESS','TECHNICAL','SECURITY','COST')),
+    severity                   varchar(16) NOT NULL CHECK (severity IN ('CRITICAL','HIGH','MEDIUM','LOW')),
+    version_no                 integer NOT NULL CHECK (version_no>0),
+    status                     varchar(16) NOT NULL DEFAULT 'ACTIVE' CHECK (status IN ('ACTIVE','RETIRED')),
+    receiver_group             varchar(120) NOT NULL,
+    response_minutes           integer NOT NULL CHECK (response_minutes BETWEEN 1 AND 10080),
+    escalation_after_minutes   integer NOT NULL CHECK (escalation_after_minutes BETWEEN 1 AND 10080),
+    escalation_receiver_group  varchar(120) NOT NULL,
+    runbook_ref                varchar(300) NOT NULL,
+    change_summary             varchar(500) NOT NULL,
+    created_by                 uuid NOT NULL REFERENCES user_account(id),
+    retired_at                 timestamptz,
+    row_version                bigint NOT NULL DEFAULT 1 CHECK (row_version>0),
+    created_at                 timestamptz NOT NULL DEFAULT now(),
+    updated_at                 timestamptz NOT NULL DEFAULT now(),
+    CONSTRAINT alert_route_version_unique UNIQUE (tenant_id,category,severity,version_no)
+);
+CREATE UNIQUE INDEX alert_route_active_unique ON alert_routing_policy(tenant_id,category,severity) WHERE status='ACTIVE';
+
+CREATE TABLE alert_silence (
+    id                  uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+    public_id           uuid NOT NULL UNIQUE DEFAULT gen_random_uuid(),
+    tenant_id           uuid NOT NULL REFERENCES tenant(id),
+    rule_code           varchar(100),
+    category            varchar(20) CHECK (category IN ('BUSINESS','TECHNICAL','SECURITY','COST')),
+    resource_type       varchar(80),
+    resource_public_id  uuid,
+    matcher             jsonb NOT NULL DEFAULT '{}'::jsonb,
+    reason              varchar(500) NOT NULL,
+    starts_at           timestamptz NOT NULL,
+    ends_at             timestamptz NOT NULL,
+    created_by          uuid NOT NULL REFERENCES user_account(id),
+    revoked_by          uuid REFERENCES user_account(id),
+    revoked_at          timestamptz,
+    row_version         bigint NOT NULL DEFAULT 1 CHECK (row_version>0),
+    created_at          timestamptz NOT NULL DEFAULT now(),
+    updated_at          timestamptz NOT NULL DEFAULT now(),
+    CONSTRAINT alert_silence_scope CHECK (rule_code IS NOT NULL OR category IS NOT NULL OR resource_public_id IS NOT NULL),
+    CONSTRAINT alert_silence_window CHECK (ends_at>starts_at)
+);
+CREATE INDEX alert_silence_active_idx ON alert_silence(tenant_id,starts_at,ends_at) WHERE revoked_at IS NULL;
+
+CREATE TABLE alert_incident (
+    id                      uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+    public_id               uuid NOT NULL UNIQUE DEFAULT gen_random_uuid(),
+    tenant_id               uuid NOT NULL REFERENCES tenant(id),
+    rule_code               varchar(100) NOT NULL,
+    category                varchar(20) NOT NULL CHECK (category IN ('BUSINESS','TECHNICAL','SECURITY','COST')),
+    severity                varchar(16) NOT NULL CHECK (severity IN ('CRITICAL','HIGH','MEDIUM','LOW')),
+    status                  varchar(24) NOT NULL DEFAULT 'OPEN' CHECK (status IN ('OPEN','ACKNOWLEDGED','MITIGATED','RESOLVED','SILENCED')),
+    fingerprint             varchar(200) NOT NULL,
+    title                   varchar(200) NOT NULL,
+    summary                 varchar(1000) NOT NULL,
+    resource_type           varchar(80),
+    resource_public_id      uuid,
+    correlation_request_id  varchar(128),
+    routing_policy_id       uuid REFERENCES alert_routing_policy(id),
+    current_owner_id        uuid REFERENCES user_account(id),
+    first_detected_at       timestamptz NOT NULL,
+    last_detected_at        timestamptz NOT NULL,
+    occurrence_count        bigint NOT NULL DEFAULT 1 CHECK (occurrence_count>0),
+    acknowledged_at         timestamptz,
+    mitigated_at            timestamptz,
+    resolved_at             timestamptz,
+    silenced_until          timestamptz,
+    escalated_at            timestamptz,
+    row_version             bigint NOT NULL DEFAULT 1 CHECK (row_version>0),
+    created_at              timestamptz NOT NULL DEFAULT now(),
+    updated_at              timestamptz NOT NULL DEFAULT now()
+);
+CREATE UNIQUE INDEX alert_incident_active_fingerprint ON alert_incident(tenant_id,fingerprint) WHERE status<>'RESOLVED';
+CREATE INDEX alert_incident_queue_idx ON alert_incident(tenant_id,status,severity,last_detected_at DESC);
+
+CREATE TABLE alert_action (
+    id                uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+    public_id         uuid NOT NULL UNIQUE DEFAULT gen_random_uuid(),
+    tenant_id         uuid NOT NULL REFERENCES tenant(id),
+    incident_id       uuid NOT NULL REFERENCES alert_incident(id) ON DELETE CASCADE,
+    action_type       varchar(24) NOT NULL CHECK (action_type IN ('DETECTED','ACKNOWLEDGED','ASSIGNED','SILENCED','MITIGATED','RESOLVED','REOPENED','ESCALATED','COMMENTED')),
+    from_status       varchar(24),
+    to_status         varchar(24),
+    actor_type        varchar(16) NOT NULL CHECK (actor_type IN ('system','user')),
+    actor_user_id     uuid REFERENCES user_account(id),
+    note              varchar(1000) NOT NULL,
+    created_at        timestamptz NOT NULL DEFAULT now()
+);
+CREATE INDEX alert_action_incident_time_idx ON alert_action(incident_id,created_at,id);
+
+COMMIT;