"""Fix schema drifts — VARCHAR lengths + missing tables.

Revision ID: 0135
Revises: 0134
Create Date: 2026-08-21
"""
from alembic import op
import sqlalchemy as sa
from sqlalchemy.dialects.postgresql import UUID, JSONB

revision = "0135"
down_revision = "0134"
branch_labels = None
depends_on = None


def upgrade() -> None:
    # 1. Fix VARCHAR length mismatches (model defines longer than DB)
    op.execute("ALTER TABLE contacts ALTER COLUMN status TYPE VARCHAR(30);")
    op.execute("ALTER TABLE notifications ALTER COLUMN type TYPE VARCHAR(100);")
    op.execute("ALTER TABLE notification_preferences ALTER COLUMN type_key TYPE VARCHAR(100);")

    # 2. Create missing table: forgejo_reported_errors
    # Model: ReportedError(Base) — NO TenantMixin, Integer id
    op.create_table(
        "forgejo_reported_errors",
        sa.Column("id", sa.Integer, primary_key=True, autoincrement=True),
        sa.Column("dedup_key", sa.String(64), nullable=False, unique=True, index=True),
        sa.Column("message", sa.Text, nullable=False),
        sa.Column("stack", sa.Text, nullable=True),
        sa.Column("forgejo_issue_number", sa.Integer, nullable=True),
        sa.Column("reported_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.text("now()")),
        sa.Column("status", sa.String(20), nullable=False, server_default=sa.text("'reported'")),
    )
    # No RLS — model has no tenant_id

    # 3. Create missing table: pgp_keys
    # Model: PgpKey(Base, TenantMixin) — UUID id, user_id, key_id, encrypted_private_key, public_key_armored
    op.create_table(
        "pgp_keys",
        sa.Column("id", UUID(as_uuid=True), primary_key=True, server_default=sa.text("gen_random_uuid()")),
        sa.Column("tenant_id", UUID(as_uuid=True), sa.ForeignKey("tenants.id", ondelete="CASCADE"), nullable=False),
        sa.Column("user_id", UUID(as_uuid=True), nullable=False),
        sa.Column("key_id", sa.String(255), nullable=False),
        sa.Column("encrypted_private_key", sa.Text, nullable=False),
        sa.Column("public_key_armored", sa.Text, nullable=False),
    )
    op.create_index("ix_pgp_keys_user", "pgp_keys", ["user_id"])
    op.execute("ALTER TABLE pgp_keys ENABLE ROW LEVEL SECURITY;")
    op.execute("CREATE POLICY pgp_keys_tenant_isolation ON pgp_keys USING (tenant_id::text = current_setting('app.current_tenant_id', true));")


def downgrade() -> None:
    op.drop_table("pgp_keys")
    op.drop_table("forgejo_reported_errors")
    op.execute("ALTER TABLE notification_preferences ALTER COLUMN type_key TYPE VARCHAR(20);")
    op.execute("ALTER TABLE notifications ALTER COLUMN type TYPE VARCHAR(20);")
    op.execute("ALTER TABLE contacts ALTER COLUMN status TYPE VARCHAR(20);")