"""add guarded serial batch revocation state

Revision ID: d1f7a9c32e84
Revises: c8d4f0a91b62
Create Date: 2026-08-16 21:00:00
"""

from typing import Sequence, Union

from alembic import op
import sqlalchemy as sa


revision: str = "d1f7a9c32e84"
down_revision: Union[str, Sequence[str], None] = "c8d4f0a91b62"
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None


def upgrade() -> None:
    with op.batch_alter_table("serial_batches") as batch_op:
        batch_op.add_column(
            sa.Column("revoked_at", sa.DateTime(timezone=True), nullable=True)
        )
        batch_op.add_column(
            sa.Column("revoked_by_user_id", sa.String(length=128), nullable=True)
        )
        batch_op.add_column(
            sa.Column("revocation_reason", sa.String(length=64), nullable=True)
        )
        batch_op.create_foreign_key(
            "fk_serial_batches_revoked_by_user_id_users",
            "users",
            ["revoked_by_user_id"],
            ["id"],
        )
        batch_op.create_check_constraint(
            "ck_serial_batches_status",
            "status IN ('active', 'revoked')",
        )
        batch_op.create_check_constraint(
            "ck_serial_batches_revocation_lifecycle",
            "(status = 'active' AND revoked_at IS NULL AND "
            "revoked_by_user_id IS NULL AND revocation_reason IS NULL) OR "
            "(status = 'revoked' AND revoked_at IS NOT NULL AND "
            "revoked_by_user_id IS NOT NULL AND revocation_reason IS NOT NULL)",
        )
    with op.batch_alter_table("serials") as batch_op:
        batch_op.create_check_constraint(
            "ck_serials_status",
            "status IN ('active', 'redeemed', 'revoked')",
        )


def downgrade() -> None:
    with op.batch_alter_table("serials") as batch_op:
        batch_op.drop_constraint("ck_serials_status", type_="check")
    with op.batch_alter_table("serial_batches") as batch_op:
        batch_op.drop_constraint(
            "ck_serial_batches_revocation_lifecycle",
            type_="check",
        )
        batch_op.drop_constraint("ck_serial_batches_status", type_="check")
        batch_op.drop_constraint(
            "fk_serial_batches_revoked_by_user_id_users",
            type_="foreignkey",
        )
        batch_op.drop_column("revocation_reason")
        batch_op.drop_column("revoked_by_user_id")
        batch_op.drop_column("revoked_at")