From ec7ac9e9e3ba4fae986ae88668369b8bc8ac660c Mon Sep 17 00:00:00 2001
From: huangzhuang_3rd <huangzhuang_3rd@tphai.com>
Date: Wed, 12 Aug 2026 13:30:32 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20AI=20Worker=20=E5=B9=B3=E5=8F=B0=20MVP?=
 =?UTF-8?q?=20v1.0.0=20-=20=E5=A4=9A=E7=A7=9F=E6=88=B7/=E9=A1=B9=E7=9B=AE?=
 =?UTF-8?q?=E7=AE=A1=E7=90=86/AI=20Worker/=E4=BB=BB=E5=8A=A1=E7=BC=96?=
 =?UTF-8?q?=E6=8E=92/HITL=E5=AE=A1=E6=A0=B8/=E6=88=90=E6=9C=AC=E6=B2=BB?=
 =?UTF-8?q?=E7=90=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 backend/app/api/v1/reviews.py | 59 +++++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 backend/app/api/v1/reviews.py

diff --git a/backend/app/api/v1/reviews.py b/backend/app/api/v1/reviews.py
new file mode 100644
index 0000000..eb6c8a5
--- /dev/null
+++ b/backend/app/api/v1/reviews.py
@@ -0,0 +1,59 @@
+"""Review gate endpoints."""
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.orm import Session
+from typing import List, Optional
+from app.database import get_db
+from app.schemas.review import ReviewResponse, ReviewDecision, ReviewCreate
+from app.services.review_service import ReviewService
+from app.api.deps import get_current_user, require_roles
+from app.core.permissions import Role
+from app.models.user import User
+
+router = APIRouter(prefix="/reviews")
+
+
+@router.get("", response_model=List[ReviewResponse])
+def list_reviews(
+    status: Optional[str] = None,
+    project_id: Optional[int] = None,
+    skip: int = 0, limit: int = 100,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    return ReviewService.list_reviews(db, user.tenant_id, status, project_id, skip, limit)
+
+
+@router.post("", response_model=ReviewResponse, status_code=201)
+def create_review(
+    req: ReviewCreate,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    return ReviewService.create_review(db, user.tenant_id, req)
+
+
+@router.get("/{review_id}", response_model=ReviewResponse)
+def get_review(
+    review_id: int,
+    user: User = Depends(get_current_user),
+    db: Session = Depends(get_db),
+):
+    r = ReviewService.get_review(db, user.tenant_id, review_id)
+    if not r:
+        raise HTTPException(status_code=404, detail="Review not found")
+    return r
+
+
+@router.post("/{review_id}/decision", response_model=ReviewResponse)
+def make_decision(
+    review_id: int,
+    req: ReviewDecision,
+    user: User = Depends(require_roles(Role.SUPER_ADMIN, Role.TENANT_ADMIN, Role.PROJECT_MANAGER, Role.REVIEWER)),
+    db: Session = Depends(get_db),
+):
+    try:
+        return ReviewService.make_decision(
+            db, user.tenant_id, review_id, user.id, user.role, req
+        )
+    except ValueError as e:
+        raise HTTPException(status_code=400, detail=str(e))