dev fix, ip controls

app/db/apps.py

@@ -408,6 +408,96 @@ def delete_app_variable(variable_id: int, app_id: str):
     con.close()
 
 
+def get_app_ip_access_rules(app_id: str):
+    run_migrations()
+    con = get_connection()
+
+    rows = con.execute(
+        """
+        SELECT id, app_id, ip_cidr, methods, description,
+               COALESCE(is_enabled, 1) AS is_enabled, created_at, updated_at
+        FROM app_ip_access_rules
+        WHERE app_id = ?
+        ORDER BY id
+        """,
+        (app_id,),
+    ).fetchall()
+
+    con.close()
+    return [dict(row) for row in rows]
+
+
+def get_app_ip_access_rule(rule_id: int, app_id: str):
+    run_migrations()
+    con = get_connection()
+
+    row = con.execute(
+        """
+        SELECT id, app_id, ip_cidr, methods, description,
+               COALESCE(is_enabled, 1) AS is_enabled, created_at, updated_at
+        FROM app_ip_access_rules
+        WHERE id = ? AND app_id = ?
+        """,
+        (rule_id, app_id),
+    ).fetchone()
+
+    con.close()
+    return dict(row) if row else None
+
+
+def create_app_ip_access_rule(app_id: str, ip_cidr: str, methods: str, description: str, is_enabled: bool):
+    run_migrations()
+    con = get_connection()
+
+    con.execute(
+        """
+        INSERT INTO app_ip_access_rules (app_id, ip_cidr, methods, description, is_enabled, created_at, updated_at)
+        VALUES (?, ?, ?, ?, ?, CURRENT_TIMESTAMP, CURRENT_TIMESTAMP)
+        """,
+        (app_id, ip_cidr, methods, description, 1 if is_enabled else 0),
+    )
+
+    con.commit()
+    con.close()
+
+
+def update_app_ip_access_rule(rule_id: int, app_id: str, ip_cidr: str, methods: str, description: str, is_enabled: bool):
+    run_migrations()
+    con = get_connection()
+
+    con.execute(
+        """
+        UPDATE app_ip_access_rules
+        SET ip_cidr = ?,
+            methods = ?,
+            description = ?,
+            is_enabled = ?,
+            updated_at = CURRENT_TIMESTAMP
+        WHERE id = ? AND app_id = ?
+        """,
+        (ip_cidr, methods, description, 1 if is_enabled else 0, rule_id, app_id),
+    )
+
+    con.commit()
+    con.close()
+
+
+def delete_app_ip_access_rule(rule_id: int, app_id: str):
+    run_migrations()
+    con = get_connection()
+
+    con.execute(
+        """
+        DELETE FROM app_ip_access_rules
+        WHERE id = ? AND app_id = ?
+        """,
+        (rule_id, app_id),
+    )
+
+    con.commit()
+    con.close()
+
+
 def update_app_resources(app_id: str, memory: str, cpus: str):
     run_migrations()
     con = get_connection()