"""Azure DevOps OAuth connection credentials.

Revision ID: 066
Revises: 065
Create Date: 2026-05-02
"""
import sqlalchemy as sa
from alembic import op

revision = "066"
down_revision = "065"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.add_column(
        "workspace_user_azure_connections",
        sa.Column("auth_type", sa.String(20), nullable=False, server_default="pat"),
    )
    op.add_column(
        "workspace_user_azure_connections",
        sa.Column("access_token_ciphertext", sa.Text(), nullable=True),
    )
    op.add_column(
        "workspace_user_azure_connections",
        sa.Column("refresh_token_ciphertext", sa.Text(), nullable=True),
    )
    op.add_column(
        "workspace_user_azure_connections",
        sa.Column("token_expires_at", sa.DateTime(timezone=True), nullable=True),
    )


def downgrade() -> None:
    op.drop_column("workspace_user_azure_connections", "token_expires_at")
    op.drop_column("workspace_user_azure_connections", "refresh_token_ciphertext")
    op.drop_column("workspace_user_azure_connections", "access_token_ciphertext")
    op.drop_column("workspace_user_azure_connections", "auth_type")