"""Installation code (install_code) for the Windows installer EXE flow.

agent_enrollments gains the install-code columns used by the universal EXE
installer: the code is typed by the operator into Setup.exe and resolves the
installation on the Hub. Only the SHA-256 of the normalized code is ever
stored (install_code_hash); install_code_expires_at bounds its life and
install_code_created_at records when it was generated (rotation rewrites
these). install_code_attempts counts failed enrollment tries to support the
per-installation rate limit. No plaintext code column exists.

Revision ID: 0023_install_codes
Revises: 0022_agent_releases_enrollment
"""
from alembic import op
import sqlalchemy as sa

revision = "0023_install_codes"
down_revision = "0022_agent_releases_enrollment"
branch_labels = None
depends_on = None


def upgrade():
    op.add_column("agent_enrollments", sa.Column("install_code_hash", sa.String(64), nullable=True))
    op.add_column("agent_enrollments", sa.Column("install_code_expires_at", sa.DateTime(timezone=True), nullable=True))
    op.add_column("agent_enrollments", sa.Column("install_code_attempts", sa.Integer(), nullable=False, server_default="0"))
    op.add_column("agent_enrollments", sa.Column("install_code_created_at", sa.DateTime(timezone=True), nullable=True))


def downgrade():
    op.drop_column("agent_enrollments", "install_code_created_at")
    op.drop_column("agent_enrollments", "install_code_attempts")
    op.drop_column("agent_enrollments", "install_code_expires_at")
    op.drop_column("agent_enrollments", "install_code_hash")