"""Create approval_requests and ai_decision_records tables.

Adds the central approval-request table for agent action approval (F-APPR)
and the AI decision-record table for the human-oversight audit trail
(F-OVERSIGHT).

Revision ID: 0123
Revises: 0122
"""

from alembic import op
import sqlalchemy as sa
from sqlalchemy.dialects.postgresql import JSONB, UUID as PGUUID

revision = "0123"
down_revision = "0122"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.create_table(
        "approval_requests",
        sa.Column("id", PGUUID(as_uuid=True), primary_key=True),
        sa.Column("tenant_id", PGUUID(as_uuid=True), nullable=False),
        sa.Column("entity_type", sa.String(80), nullable=False),
        sa.Column("entity_id", PGUUID(as_uuid=True), nullable=False),
        sa.Column("action", sa.String(120), nullable=False),
        sa.Column("requested_by", PGUUID(as_uuid=True), nullable=False),
        sa.Column("requested_by_type", sa.String(20), nullable=False, server_default="agent"),
        sa.Column("approver_id", PGUUID(as_uuid=True), nullable=True),
        sa.Column("approver_group", sa.String(120), nullable=True),
        sa.Column("status", sa.String(20), nullable=False, server_default="pending"),
        sa.Column("comment", sa.Text(), nullable=True),
        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
        sa.Column("resolved_at", sa.DateTime(timezone=True), nullable=True),
        sa.Column("expires_at", sa.DateTime(timezone=True), nullable=True),
        sa.Column("metadata", JSONB, nullable=False, server_default=sa.text("'{}'::jsonb")),
    )
    op.create_index(
        "ix_approval_requests_tenant_status", "approval_requests", ["tenant_id", "status"]
    )
    op.create_index(
        "ix_approval_requests_tenant_entity",
        "approval_requests",
        ["tenant_id", "entity_type", "entity_id"],
    )
    op.create_index(
        "ix_approval_requests_tenant_approver",
        "approval_requests",
        ["tenant_id", "approver_id"],
    )

    op.create_table(
        "ai_decision_records",
        sa.Column("id", PGUUID(as_uuid=True), primary_key=True),
        sa.Column("tenant_id", PGUUID(as_uuid=True), nullable=False),
        sa.Column("agent_run_id", PGUUID(as_uuid=True), nullable=False),
        sa.Column("recommendation", sa.Text(), nullable=False),
        sa.Column("evidence", JSONB, nullable=False, server_default=sa.text("'{}'::jsonb")),
        sa.Column("reviewer_id", PGUUID(as_uuid=True), nullable=True),
        sa.Column("decision", sa.String(20), nullable=True),
        sa.Column("decision_timestamp", sa.String(40), nullable=True),
        sa.Column("deviation_note", sa.Text(), nullable=True),
        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
        sa.Column("deleted_at", sa.DateTime(timezone=True), nullable=True),
        sa.Column("owner_id", PGUUID(as_uuid=True), nullable=True),
    )
    op.create_index(
        "ix_ai_decision_records_tenant_run", "ai_decision_records", ["tenant_id", "agent_run_id"]
    )


def downgrade() -> None:
    op.drop_index("ix_ai_decision_records_tenant_run", table_name="ai_decision_records")
    op.drop_table("ai_decision_records")
    op.drop_index("ix_approval_requests_tenant_approver", table_name="approval_requests")
    op.drop_index("ix_approval_requests_tenant_entity", table_name="approval_requests")
    op.drop_index("ix_approval_requests_tenant_status", table_name="approval_requests")
    op.drop_table("approval_requests")