feat(models): 组织、用户、角色、客户、会话与消息模型

按组织边界定义数据关系，补齐仓储层与通用工具，迁移脚本可重复执行。

backend/app/models/channels/__init__.py

@@ -0,0 +1,26 @@
+"""
+Copyright 2024-2026 ReplyPier
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+"""
+
+from app.models.channels.channel_account import ChannelAccount, ChannelType
+from app.models.channels.channel_conversation import ChannelConversation
+from app.models.channels.agent_channel_config import AgentChannelConfig
+
+__all__ = [
+    "ChannelAccount",
+    "ChannelType",
+    "ChannelConversation",
+    "AgentChannelConfig",
+]

backend/app/models/channels/agent_channel_config.py

@@ -0,0 +1,58 @@
+"""
+Copyright 2024-2026 ReplyPier
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+"""
+
+import uuid
+
+from sqlalchemy import Column, Boolean, DateTime, ForeignKey, UniqueConstraint
+from sqlalchemy.orm import relationship
+from sqlalchemy.sql import func
+from sqlalchemy.dialects.postgresql import UUID
+
+from app.database import Base
+
+
+class AgentChannelConfig(Base):
+    """Routes a connected channel account to the AI agent that answers it.
+
+    One config per channel account: every inbound conversation on that
+    account is handled by the mapped agent.
+    """
+    __tablename__ = "agent_channel_configs"
+
+    __table_args__ = (
+        UniqueConstraint('channel_account_id', name='uq_agent_channel_config_account'),
+    )
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    agent_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("agents.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    channel_account_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("channel_accounts.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    is_active = Column(Boolean, nullable=False, default=True)
+
+    created_at = Column(DateTime(timezone=True), server_default=func.now())
+    updated_at = Column(DateTime(timezone=True), server_default=func.now(), onupdate=func.now())
+
+    agent = relationship("Agent")
+    account = relationship("ChannelAccount")

backend/app/models/channels/channel_account.py

@@ -0,0 +1,85 @@
+"""
+Copyright 2024-2026 ReplyPier
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+"""
+
+import enum
+import uuid
+
+from sqlalchemy import Column, String, Text, Boolean, DateTime, ForeignKey, JSON, UniqueConstraint
+from sqlalchemy.orm import relationship
+from sqlalchemy.sql import func
+from sqlalchemy.dialects.postgresql import UUID
+
+from app.database import Base
+
+
+class ChannelType(str, enum.Enum):
+    """Messaging channels a customer conversation can arrive from.
+
+    Stored as plain strings (not a DB enum) so adding a channel never
+    requires a schema migration. 'web' is the embedded widget and has no
+    ChannelAccount row.
+    """
+    WEB = "web"
+    TELEGRAM = "telegram"
+    WHATSAPP = "whatsapp"
+    MESSENGER = "messenger"
+    INSTAGRAM = "instagram"
+    SLACK = "slack"
+    EMAIL = "email"
+    SMS = "sms"
+    LINE = "line"
+    API = "api"
+
+
+class ChannelAccount(Base):
+    """An organization's connected account on an external messaging channel.
+
+    One row per connected bot/number/page. Channel-specific secrets
+    (bot tokens, page access tokens, WABA ids, ...) live together in
+    `encrypted_credentials` as a Fernet-encrypted JSON blob so new channels
+    never need schema changes.
+    """
+    __tablename__ = "channel_accounts"
+
+    __table_args__ = (
+        UniqueConstraint('channel_type', 'external_account_id', name='uq_channel_account_external'),
+    )
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    organization_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("organizations.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    channel_type = Column(String, nullable=False, index=True)
+    # Platform-side identifier: Telegram bot id, WhatsApp phone_number_id,
+    # Facebook page id, Slack team id, inbound email address, ...
+    external_account_id = Column(String, nullable=False)
+    # Human-readable label shown in settings: "@acme_bot", "Acme (+44...)"
+    display_name = Column(String, nullable=True)
+    # Fernet-encrypted JSON of channel-specific secrets
+    encrypted_credentials = Column(Text, nullable=False)
+    # Per-account secret used to authenticate inbound webhooks
+    webhook_secret = Column(String, nullable=False)
+    # Non-secret channel settings (greeting, template defaults, storage mode, ...)
+    settings = Column(JSON, default=dict)
+    is_active = Column(Boolean, nullable=False, default=True)
+
+    created_at = Column(DateTime(timezone=True), server_default=func.now())
+    updated_at = Column(DateTime(timezone=True), server_default=func.now(), onupdate=func.now())
+
+    organization = relationship("Organization")

backend/app/models/channels/channel_conversation.py

@@ -0,0 +1,92 @@
+"""
+Copyright 2024-2026 ReplyPier
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+"""
+
+import uuid
+
+from sqlalchemy import Column, String, DateTime, ForeignKey, JSON, UniqueConstraint
+from sqlalchemy.orm import relationship
+from sqlalchemy.sql import func
+from sqlalchemy.dialects.postgresql import UUID
+
+from app.database import Base
+
+
+class ChannelConversation(Base):
+    """Maps an external channel conversation to a ReplyPier session.
+
+    The generic analog of SlackConversation: one row per
+    (connected account, platform conversation, session). A new session for
+    the same platform conversation (e.g. after the previous one closes)
+    gets a new row.
+    """
+    __tablename__ = "channel_conversations"
+
+    __table_args__ = (
+        UniqueConstraint(
+            'channel_account_id', 'external_conversation_id', 'session_id',
+            name='uq_channel_conversation_session'
+        ),
+    )
+
+    id = Column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    channel_account_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("channel_accounts.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+    channel_type = Column(String, nullable=False)
+    # Platform conversation id: Telegram chat_id, WhatsApp wa_id,
+    # Messenger PSID, Instagram IGSID, Slack thread key, email thread id, ...
+    external_conversation_id = Column(String, nullable=False, index=True)
+    # Platform user id of the customer (often equals the conversation id)
+    external_user_id = Column(String, nullable=False)
+
+    session_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("session_to_agents.session_id", ondelete="CASCADE"),
+        nullable=False,
+        index=True
+    )
+
+    # Denormalized for faster webhook-path lookups
+    organization_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("organizations.id", ondelete="CASCADE"),
+        nullable=False
+    )
+    agent_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("agents.id", ondelete="SET NULL"),
+        nullable=True
+    )
+    customer_id = Column(
+        UUID(as_uuid=True),
+        ForeignKey("customers.id", ondelete="SET NULL"),
+        nullable=True
+    )
+
+    # Timestamp of the customer's latest inbound message; drives the
+    # 24h (Meta) delivery-window checks.
+    last_inbound_at = Column(DateTime(timezone=True), nullable=True)
+    # Channel-specific extras (message thread ids, profile snapshots, ...)
+    extra = Column(JSON, default=dict)
+
+    created_at = Column(DateTime(timezone=True), server_default=func.now())
+    updated_at = Column(DateTime(timezone=True), server_default=func.now(), onupdate=func.now())
+
+    account = relationship("ChannelAccount")
+    session = relationship("SessionToAgent")