support versions, campaign structure change

server/app/mailer/persistence/campaigns.py

@@ -147,6 +147,23 @@ def create_campaign_version_from_json(
     return campaign, version
 
 
+
+
+def _version_is_user_locked(version: CampaignVersion) -> bool:
+    return bool(version.published_at)
+
+
+def _version_is_validated_and_locked(version: CampaignVersion) -> bool:
+    validation_summary = version.validation_summary if isinstance(version.validation_summary, dict) else {}
+    return bool(version.locked_at and validation_summary.get("ok") is True and not _version_is_user_locked(version))
+
+
+def _ensure_version_validated_and_locked(version: CampaignVersion) -> None:
+    if _version_is_user_locked(version):
+        raise CampaignPersistenceError("User-locked audit-safe versions cannot be built, queued, dry-run or sent. Create an editable copy instead.")
+    if not _version_is_validated_and_locked(version):
+        raise CampaignPersistenceError("Campaign version must be validated and locked before building, queueing, dry-run or sending.")
+
 def load_version_config(session: Session, version_id: str):
     version = session.get(CampaignVersion, version_id)
     if not version:
@@ -168,6 +185,14 @@ def validate_campaign_version(
     campaign = session.get(Campaign, version.campaign_id)
     if not campaign or campaign.tenant_id != tenant_id:
         raise CampaignPersistenceError("Campaign version is not accessible for this tenant")
+    if version.published_at or version.workflow_state in {
+        CampaignVersionWorkflowState.QUEUED.value,
+        CampaignVersionWorkflowState.SENDING.value,
+        CampaignVersionWorkflowState.COMPLETED.value,
+        CampaignVersionWorkflowState.CANCELLED.value,
+        CampaignVersionWorkflowState.ARCHIVED.value,
+    }:
+        raise CampaignPersistenceError("Audit-safe/final campaign versions cannot be validated. Create an editable copy instead.")
 
     report = validate_campaign_config(config, campaign_file=snapshot_path, check_files=check_files)
     report_json = report.model_dump(mode="json")
@@ -269,10 +294,7 @@ def build_campaign_version(
     validation_summary = version.validation_summary if isinstance(version.validation_summary, dict) else {}
     if not validation_summary.get("ok"):
         raise CampaignPersistenceError("Campaign version must be successfully validated before messages are built")
-    if version.locked_at is None:
-        from datetime import UTC, datetime
-
-        version.locked_at = datetime.now(UTC)
+    _ensure_version_validated_and_locked(version)
 
     output_dir = BUILD_OUTPUT_DIR / campaign.id / version.id
     result = build_campaign_messages(config, campaign_file=snapshot_path, output_dir=output_dir, write_eml=write_eml)