"""CF accounts — replace api_token_enc with config_enc (full credentials JSON).

Revision ID: 045
Revises: 044
"""
from alembic import op
import sqlalchemy as sa

revision = "045"
down_revision = "044"
branch_labels = None
depends_on = None


def upgrade() -> None:
    # Add config_enc — stores AES/Fernet-encrypted JSON of all CF credentials
    op.add_column("cf_accounts", sa.Column("config_enc", sa.Text, nullable=True))

    # Make the old single-token column nullable so existing rows survive
    op.alter_column("cf_accounts", "api_token_enc", nullable=True)


def downgrade() -> None:
    op.alter_column("cf_accounts", "api_token_enc", nullable=False)
    op.drop_column("cf_accounts", "config_enc")