feat: govern autonomous campaign delivery schedules

src/govoplan_campaign/backend/db/models.py

@@ -192,6 +192,12 @@ class CampaignSchedule(Base, TimestampMixin):
         index=True,
     )
     name: Mapped[str] = mapped_column(String(255), nullable=False)
+    delivery_mode: Mapped[str] = mapped_column(
+        String(20),
+        default="manual",
+        nullable=False,
+        index=True,
+    )
     recurrence_kind: Mapped[str] = mapped_column(
         String(20),
         default="once",
@@ -210,6 +216,9 @@ class CampaignSchedule(Base, TimestampMixin):
     copy_options: Mapped[dict[str, Any]] = mapped_column(JSON, default=dict, nullable=False)
     source_snapshot: Mapped[dict[str, Any]] = mapped_column(JSON, nullable=False)
     source_snapshot_hash: Mapped[str] = mapped_column(String(64), nullable=False, index=True)
+    approved_execution_snapshot_hash: Mapped[str | None] = mapped_column(
+        String(64), nullable=True, index=True
+    )
     source_base_path: Mapped[str | None] = mapped_column(String(1000), nullable=True)
     last_fired_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
     last_campaign_id: Mapped[str | None] = mapped_column(
@@ -218,6 +227,10 @@ class CampaignSchedule(Base, TimestampMixin):
         index=True,
     )
     last_error: Mapped[str | None] = mapped_column(Text, nullable=True)
+    last_outcome: Mapped[str | None] = mapped_column(String(30), nullable=True)
+    last_recovery_state: Mapped[str | None] = mapped_column(
+        String(30), nullable=True
+    )
 
 
 class CampaignScheduleOccurrence(Base, TimestampMixin):
@@ -240,6 +253,9 @@ class CampaignScheduleOccurrence(Base, TimestampMixin):
     )
     scheduled_for: Mapped[datetime] = mapped_column(DateTime(timezone=True), nullable=False)
     status: Mapped[str] = mapped_column(String(30), default="preparing", nullable=False, index=True)
+    idempotency_key: Mapped[str | None] = mapped_column(
+        String(200), nullable=True, index=True
+    )
     generated_campaign_id: Mapped[str | None] = mapped_column(
         ForeignKey("campaigns.id", ondelete="SET NULL"),
         nullable=True,
@@ -251,6 +267,16 @@ class CampaignScheduleOccurrence(Base, TimestampMixin):
         index=True,
     )
     error: Mapped[str | None] = mapped_column(Text, nullable=True)
+    delivery_command_ids: Mapped[list[str]] = mapped_column(
+        JSON, default=list, nullable=False
+    )
+    recovery_state: Mapped[str] = mapped_column(
+        String(30), default="none", nullable=False, index=True
+    )
+    evidence: Mapped[dict[str, Any]] = mapped_column(JSON, default=dict, nullable=False)
+    last_checked_at: Mapped[datetime | None] = mapped_column(
+        DateTime(timezone=True), nullable=True
+    )
 
 
 class RecipientImportMappingProfile(Base, TimestampMixin):