feat(poll): enforce governed participation ownership

src/govoplan_poll/backend/db/models.py

@@ -42,6 +42,11 @@ class Poll(Base, TimestampMixin):
     context_module: Mapped[str | None] = mapped_column(String(100), nullable=True, index=True)
     context_resource_type: Mapped[str | None] = mapped_column(String(100), nullable=True)
     context_resource_id: Mapped[str | None] = mapped_column(String(255), nullable=True, index=True)
+    participation_gateway_: Mapped[dict[str, Any] | None] = mapped_column(
+        "participation_gateway",
+        JSON,
+        nullable=True,
+    )
     workflow_state: Mapped[str | None] = mapped_column(String(100), nullable=True, index=True)
     workflow_steps: Mapped[list[dict[str, Any]]] = mapped_column(JSON, default=list, nullable=False)
     allow_anonymous: Mapped[bool] = mapped_column(Boolean, default=False, nullable=False)
@@ -128,11 +133,50 @@ class PollInvitation(Base, TimestampMixin):
     expires_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True, index=True)
     revoked_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True, index=True)
     last_used_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
+    response_gateway_: Mapped[dict[str, Any] | None] = mapped_column("response_gateway", JSON, nullable=True)
+    participation_policy_: Mapped[dict[str, Any] | None] = mapped_column("participation_policy", JSON, nullable=True)
     metadata_: Mapped[dict[str, Any] | None] = mapped_column("metadata", JSON, nullable=True)
 
     poll: Mapped[Poll] = relationship(back_populates="invitations")
 
 
+class PollParticipationSubmission(Base, TimestampMixin):
+    __tablename__ = "poll_participation_submissions"
+    __table_args__ = (
+        UniqueConstraint(
+            "invitation_id",
+            "idempotency_key",
+            name="uq_poll_participation_submission_idempotency",
+        ),
+        Index(
+            "ix_poll_participation_submission_poll_created",
+            "tenant_id",
+            "poll_id",
+            "created_at",
+        ),
+    )
+
+    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
+    tenant_id: Mapped[str] = mapped_column(String(36), nullable=False, index=True)
+    poll_id: Mapped[str] = mapped_column(
+        ForeignKey("poll_polls.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    invitation_id: Mapped[str] = mapped_column(
+        ForeignKey("poll_invitations.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    response_id: Mapped[str] = mapped_column(
+        ForeignKey("poll_responses.id", ondelete="CASCADE"),
+        nullable=False,
+        index=True,
+    )
+    idempotency_key: Mapped[str] = mapped_column(String(255), nullable=False)
+    request_fingerprint: Mapped[str] = mapped_column(String(64), nullable=False)
+
+
 class PollLifecycleTransition(Base, TimestampMixin):
     __tablename__ = "poll_lifecycle_transitions"
     __table_args__ = (
@@ -157,4 +201,12 @@ class PollLifecycleTransition(Base, TimestampMixin):
     poll: Mapped[Poll] = relationship(back_populates="lifecycle_transitions")
 
 
-__all__ = ["Poll", "PollInvitation", "PollLifecycleTransition", "PollOption", "PollResponse", "new_uuid"]
+__all__ = [
+    "Poll",
+    "PollInvitation",
+    "PollLifecycleTransition",
+    "PollOption",
+    "PollParticipationSubmission",
+    "PollResponse",
+    "new_uuid",
+]