WangShen007
20fef2b9f3
One word everywhere: ReplyPier in UI copy, package and image names, the replypier.site domains (app/api/docs/help), REPLYPIER_* settings and the --rp-* design tokens. - public widget API is window.ReplyPier with replypierId / replypierBaseUrl / replypierConfig / replypierToken, loader at webclient/replypier.min.js; both bundles rebuilt from source - NOTICE, llms.txt, CONTRIBUTING, HELP_CENTER_INFRA and the demo runtime config rewritten; the demo config ships no third-party keys - migration adds the ReplyPier managed model value to the AI model enum - local compose project, database, role, volume and Docker network carry the same name
78 lines
3.4 KiB
Python
78 lines
3.4 KiB
Python
"""
|
|
Copyright 2024-2026 ReplyPier
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
"""
|
|
|
|
"""add guardrail_events table and agents.topic_scope
|
|
|
|
Revision ID: add_guardrails_layer_001
|
|
Revises: add_crm_customer_syncs_001
|
|
Create Date: 2026-07-30
|
|
|
|
Global guardrail layer for customer-facing agents. guardrail_events records
|
|
every trigger (injection signals, blocks, prompt-leak replacements, scope
|
|
refusals) so abuse is measurable and false positives reviewable before any
|
|
rule is promoted from counting to blocking. agents.topic_scope is the optional
|
|
per-agent remit override for the code-owned policy's topic-scope line; null
|
|
falls back to the agent description or the organization name/domain.
|
|
"""
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
from sqlalchemy.dialects import postgresql
|
|
|
|
# revision identifiers, used by Alembic.
|
|
revision = 'add_guardrails_layer_001'
|
|
down_revision = 'add_crm_customer_syncs_001'
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
'guardrail_events',
|
|
sa.Column('id', postgresql.UUID(as_uuid=True), primary_key=True),
|
|
sa.Column('organization_id', postgresql.UUID(as_uuid=True),
|
|
sa.ForeignKey('organizations.id', ondelete='CASCADE'), nullable=True),
|
|
sa.Column('agent_id', postgresql.UUID(as_uuid=True),
|
|
sa.ForeignKey('agents.id', ondelete='SET NULL'), nullable=True),
|
|
# No FK: a help-center /ask event has no chat session.
|
|
sa.Column('session_id', postgresql.UUID(as_uuid=True), nullable=True),
|
|
sa.Column('surface', sa.String(20), nullable=False),
|
|
sa.Column('layer', sa.String(16), nullable=False),
|
|
sa.Column('rule', sa.String(64), nullable=False),
|
|
sa.Column('action', sa.String(16), nullable=False),
|
|
sa.Column('score', sa.Float(), nullable=True),
|
|
# Rule ids / short match tokens only — never raw visitor text.
|
|
sa.Column('matched', sa.JSON(), nullable=True),
|
|
sa.Column('char_len', sa.Integer(), nullable=True),
|
|
# Encrypted at rest (EncryptedText decorates a Text column).
|
|
sa.Column('excerpt', sa.Text(), nullable=True),
|
|
sa.Column('reviewed', sa.Boolean(), server_default=sa.text('false'), nullable=False),
|
|
sa.Column('false_positive', sa.Boolean(), server_default=sa.text('false'), nullable=False),
|
|
sa.Column('created_at', sa.TIMESTAMP(timezone=True), server_default=sa.func.now()),
|
|
)
|
|
op.create_index('ix_guardrail_events_org_created', 'guardrail_events',
|
|
['organization_id', 'created_at'])
|
|
op.create_index('ix_guardrail_events_rule_created', 'guardrail_events',
|
|
['rule', 'created_at'])
|
|
|
|
op.add_column('agents', sa.Column('topic_scope', sa.Text(), nullable=True))
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_column('agents', 'topic_scope')
|
|
op.drop_index('ix_guardrail_events_rule_created', table_name='guardrail_events')
|
|
op.drop_index('ix_guardrail_events_org_created', table_name='guardrail_events')
|
|
op.drop_table('guardrail_events')
|