Files
photoanalyzer/migrations/versions/0005_safety_analysis_workflow.py
domverse 457dd5bd90 US02-06: Deliver Workflow, Safety, Library, Analysis, and Stats Views
Ports the safety review and the Photo Analyzer Library/Analyze/Stats
experiences onto the shared API + service layer, and adds the Workflow
home, enforcing the pipeline gates and the one-mutating-job policy.

Backend
- migration 0005 + models: safety_reviews (append-only, latest row is the
  current decision) and analysis_results (donor photos schema re-keyed to
  asset_id).
- SafetyService: persist scores/decisions, review queue with filters, and
  the EXIF safety checkpoint (mutually-exclusive sfw/nsfw keyword written,
  read back, current_sha256 refreshed) that upload eligibility depends on.
- AnalysisService: the privacy gate — the vision provider is called ONLY for
  canonical, confirmed-SFW assets; nsfw/undecided are recorded skipped without
  a request. Provider is an injected adapter (real OpenAI-compatible Gemini
  call extracted from photo_analyzer.analyze_image; a fake in tests).
- LibraryService: Library search + Stats read model ported from webapp/query.py
  (LIKE search in place of FTS5; facets, top tags, years, albums, people).
- WorkflowService + GET /api/v1/workflow: per-stage readiness derived from the
  source tables — counts, blockers, last-run, action, and an active_job that
  drives read-only-during-jobs. Safety scoring and analysis run as durable jobs
  under the library_write lock via new domain handlers, so a second mutating
  job is refused.
- routes: workflow, safety (queue/counts/decisions/jobs), analysis
  (counts/results/jobs), library (assets/facets/stats).

Frontend
- five views (frontend/js/views.js) on the US02-05 shell: Workflow stepper
  (status text+icon, not colour alone; actions disabled with a reason while a
  job runs), Safety review (filter tabs, decide, persists across reload),
  Library (search + cards), Analyze (counts + live job log via the SSE
  adapter), Stats. Shared DOM helpers extracted to dom.js; Workflow is the home
  route.

Tests
- integration: provider-call privacy (nsfw never reaches the provider),
  sfw→nsfw flip drops analysis eligibility, decision persistence, one-mutating-
  job rejection, workflow counts, and the exiftool safety-keyword write/verify.
- e2e: Workflow cards, actions disabled+explained during a job, safety
  decide-persists-across-reload, Library search, Stats, Analyze counts.
- traceability map updated for US02-05 and US02-06.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-06 16:52:01 +02:00

64 lines
2.5 KiB
Python

"""Safety reviews and content-analysis results (US02-06).
Revision ID: 0005_safety_analysis
Revises: 0004_durable_jobs
Create Date: 2026-08-06
"""
import sqlalchemy as sa
from alembic import op
revision = "0005_safety_analysis"
down_revision = "0004_durable_jobs"
branch_labels = None
depends_on = None
def upgrade() -> None:
op.create_table(
"safety_reviews",
sa.Column("id", sa.String(), primary_key=True),
sa.Column("asset_id", sa.String(), sa.ForeignKey("assets.id"), nullable=False),
sa.Column("score", sa.Float(), nullable=True),
sa.Column("decision", sa.String(), nullable=True),
sa.Column("prior_decision", sa.String(), nullable=True),
sa.Column("reviewer", sa.String(), nullable=True),
sa.Column("exif_verified_at", sa.DateTime(timezone=True), nullable=True),
sa.Column("result_sha256", sa.String(), nullable=True),
sa.Column(
"created_at",
sa.DateTime(timezone=True),
nullable=False,
server_default=sa.text("CURRENT_TIMESTAMP"),
),
)
op.create_index("ix_safety_reviews_asset_id", "safety_reviews", ["asset_id"])
op.create_table(
"analysis_results",
sa.Column("asset_id", sa.String(), sa.ForeignKey("assets.id"), primary_key=True),
sa.Column("status", sa.String(), nullable=False, server_default="pending"),
sa.Column("description", sa.String(), nullable=True),
sa.Column("tags", sa.String(), nullable=True),
sa.Column("people_count", sa.Integer(), nullable=True),
sa.Column("setting", sa.String(), nullable=True),
sa.Column("time_of_day", sa.String(), nullable=True),
sa.Column("season", sa.String(), nullable=True),
sa.Column("mood", sa.String(), nullable=True),
sa.Column("location_hint", sa.String(), nullable=True),
sa.Column("approx_year", sa.Integer(), nullable=True),
sa.Column("model", sa.String(), nullable=True),
sa.Column("prompt_version", sa.String(), nullable=True),
sa.Column("tokens_total", sa.Integer(), nullable=True),
sa.Column("raw_response", sa.String(), nullable=True),
sa.Column("error_message", sa.String(), nullable=True),
sa.Column("analyzed_at", sa.DateTime(timezone=True), nullable=True),
sa.Column("exif_written_at", sa.DateTime(timezone=True), nullable=True),
)
op.create_index("ix_analysis_results_status", "analysis_results", ["status"])
def downgrade() -> None:
op.drop_table("analysis_results")
op.drop_table("safety_reviews")