import sqlalchemy as sa
from alembic import op

revision = "0004_tenant_key_admin"
down_revision = "0003_ai_evidence"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.add_column(
        "tenant_keys",
        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=True),
    )
    op.execute("UPDATE tenant_keys SET updated_at = created_at WHERE updated_at IS NULL")
    op.alter_column(
        "tenant_keys",
        "updated_at",
        existing_type=sa.DateTime(timezone=True),
        nullable=False,
        server_default=sa.func.now(),
    )
    op.create_table(
        "tenant_key_audit_events",
        sa.Column("id", sa.Integer(), primary_key=True, autoincrement=True),
        sa.Column("tenant_id", sa.String(128), nullable=False),
        sa.Column("actor", sa.String(254), nullable=False),
        sa.Column("action", sa.String(16), nullable=False),
        sa.Column(
            "occurred_at",
            sa.DateTime(timezone=True),
            nullable=False,
            server_default=sa.func.now(),
        ),
    )


def downgrade() -> None:
    op.drop_table("tenant_key_audit_events")
    op.drop_column("tenant_keys", "updated_at")