"""Add API-key authentication fields to vault connections."""

from collections.abc import Sequence

import sqlalchemy as sa
from alembic import op

revision: str = "20260802_0003"
down_revision: str | Sequence[str] | None = "20260802_0002"
branch_labels: str | Sequence[str] | None = None
depends_on: str | Sequence[str] | None = None


def upgrade() -> None:
    with op.batch_alter_table("vault_connections") as batch:
        batch.add_column(
            sa.Column(
                "login_method",
                sa.String(16),
                nullable=False,
                server_default="password",
            )
        )
        batch.add_column(sa.Column("encrypted_client_secret", sa.Text(), nullable=True))


def downgrade() -> None:
    with op.batch_alter_table("vault_connections") as batch:
        batch.drop_column("encrypted_client_secret")
        batch.drop_column("login_method")