refactor(models): split models.py into topical submodules

decnet/web/db/models.py was approaching 1000 lines across User/Log/
Attacker/Swarm/Topology/Workers/Updater/Health domains. Split into a
package with one module per domain; __init__.py re-exports every symbol
so all 52 call sites keep importing from decnet.web.db.models
unchanged.

decnet/web/db/models/__init__.py

@@ -0,0 +1,214 @@
+"""
+Database tables (SQLModel) and HTTP request/response shapes (Pydantic).
+
+Split into topical modules for readability, but every symbol is re-exported
+from this package so ``from decnet.web.db.models import X`` keeps working
+everywhere — no importer needs to know which submodule a class lives in.
+"""
+from ._base import (
+    NullableDatetime,
+    NullableString,
+    _BIG_TEXT,
+    _normalize_null,
+)
+from .auth import (
+    AdminConfigResponse,
+    ChangePasswordRequest,
+    ConfigResponse,
+    CreateUserRequest,
+    DeploymentLimitRequest,
+    GlobalMutationIntervalRequest,
+    LoginRequest,
+    ResetUserPasswordRequest,
+    Token,
+    UpdateUserRoleRequest,
+    User,
+    UserResponse,
+)
+from .attackers import (
+    Attacker,
+    AttackerBehavior,
+    AttackersResponse,
+    SessionProfile,
+)
+from .deploy import (
+    DeployIniRequest,
+    MutateIntervalRequest,
+)
+from .health import (
+    ComponentHealth,
+    HealthResponse,
+)
+from .logs import (
+    Bounty,
+    BountyResponse,
+    Log,
+    LogsResponse,
+    State,
+    StatsResponse,
+)
+from .swarm import (
+    DeckyShard,
+    DeckyShardView,
+    SwarmCheckResponse,
+    SwarmDeployRequest,
+    SwarmDeployResponse,
+    SwarmEnrolledBundle,
+    SwarmEnrollRequest,
+    SwarmHost,
+    SwarmHostHealth,
+    SwarmHostResult,
+    SwarmHostView,
+    SwarmTeardownRequest,
+    SwarmUpdaterBundle,
+)
+from .topology import (
+    LAN,
+    ArchetypeCatalogResponse,
+    ArchetypeEntry,
+    DeckyCreateRequest,
+    DeckyRow,
+    DeckyUpdateRequest,
+    DeployAcceptedResponse,
+    EdgeCreateRequest,
+    EdgeRow,
+    LANCreateRequest,
+    LANRow,
+    LANUpdateRequest,
+    MutationEnqueueRequest,
+    MutationEnqueueResponse,
+    MutationRow,
+    NextIPResponse,
+    NextSubnetResponse,
+    NotEditableResponse,
+    ServiceCatalogResponse,
+    Topology,
+    TopologyDecky,
+    TopologyDetail,
+    TopologyEdge,
+    TopologyGenerateRequest,
+    TopologyListResponse,
+    TopologyMutation,
+    TopologyStatusEvent,
+    TopologyStatusEventRow,
+    TopologySummary,
+    ValidationErrorResponse,
+    ValidationIssueResponse,
+    VersionConflictResponse,
+)
+from .updater import (
+    HostReleaseInfo,
+    HostReleasesResponse,
+    PushUpdateRequest,
+    PushUpdateResponse,
+    PushUpdateResult,
+    RollbackRequest,
+    RollbackResponse,
+)
+from .workers import (
+    StartAllResponse,
+    StartFailure,
+    WorkerControlResponse,
+    WorkersResponse,
+    WorkerStatus,
+)
+
+__all__ = [
+    # _base
+    "NullableDatetime",
+    "NullableString",
+    "_BIG_TEXT",
+    "_normalize_null",
+    # auth
+    "AdminConfigResponse",
+    "ChangePasswordRequest",
+    "ConfigResponse",
+    "CreateUserRequest",
+    "DeploymentLimitRequest",
+    "GlobalMutationIntervalRequest",
+    "LoginRequest",
+    "ResetUserPasswordRequest",
+    "Token",
+    "UpdateUserRoleRequest",
+    "User",
+    "UserResponse",
+    # attackers
+    "Attacker",
+    "AttackerBehavior",
+    "AttackersResponse",
+    "SessionProfile",
+    # deploy
+    "DeployIniRequest",
+    "MutateIntervalRequest",
+    # health
+    "ComponentHealth",
+    "HealthResponse",
+    # logs
+    "Bounty",
+    "BountyResponse",
+    "Log",
+    "LogsResponse",
+    "State",
+    "StatsResponse",
+    # swarm
+    "DeckyShard",
+    "DeckyShardView",
+    "SwarmCheckResponse",
+    "SwarmDeployRequest",
+    "SwarmDeployResponse",
+    "SwarmEnrolledBundle",
+    "SwarmEnrollRequest",
+    "SwarmHost",
+    "SwarmHostHealth",
+    "SwarmHostResult",
+    "SwarmHostView",
+    "SwarmTeardownRequest",
+    "SwarmUpdaterBundle",
+    # topology
+    "LAN",
+    "ArchetypeCatalogResponse",
+    "ArchetypeEntry",
+    "DeckyCreateRequest",
+    "DeckyRow",
+    "DeckyUpdateRequest",
+    "DeployAcceptedResponse",
+    "EdgeCreateRequest",
+    "EdgeRow",
+    "LANCreateRequest",
+    "LANRow",
+    "LANUpdateRequest",
+    "MutationEnqueueRequest",
+    "MutationEnqueueResponse",
+    "MutationRow",
+    "NextIPResponse",
+    "NextSubnetResponse",
+    "NotEditableResponse",
+    "ServiceCatalogResponse",
+    "Topology",
+    "TopologyDecky",
+    "TopologyDetail",
+    "TopologyEdge",
+    "TopologyGenerateRequest",
+    "TopologyListResponse",
+    "TopologyMutation",
+    "TopologyStatusEvent",
+    "TopologyStatusEventRow",
+    "TopologySummary",
+    "ValidationErrorResponse",
+    "ValidationIssueResponse",
+    "VersionConflictResponse",
+    # updater
+    "HostReleaseInfo",
+    "HostReleasesResponse",
+    "PushUpdateRequest",
+    "PushUpdateResponse",
+    "PushUpdateResult",
+    "RollbackRequest",
+    "RollbackResponse",
+    # workers
+    "StartAllResponse",
+    "StartFailure",
+    "WorkerControlResponse",
+    "WorkersResponse",
+    "WorkerStatus",
+]