"""Add plugin_version to external_admin_installations for tamper-detection baseline.

Tracks the installed AI Assist plugin version so Core can distinguish a
legitimate plugin upgrade (hash change + version change) from a tamper event
(hash change with same version).

Revision ID: 078
Revises: 077
"""

from typing import Sequence, Union

import sqlalchemy as sa
from alembic import op

revision: str = "078"
down_revision: Union[str, None] = "077"
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None


def upgrade() -> None:
    op.add_column(
        "external_admin_installations",
        sa.Column("plugin_version", sa.String(40), nullable=True),
    )


def downgrade() -> None:
    op.drop_column("external_admin_installations", "plugin_version")