"""Append-only audit events for project authorization mutations (Workstream F).

Records every membership-state mutation that Core performs for a project, with the actor,
target, source-scoped before and after state, and the authorization versions. The
application only inserts into this table; no update or delete path exists in code.

Revision ID: 194
Revises: 193
"""
import sqlalchemy as sa
from alembic import op
from sqlalchemy.dialects import postgresql

revision = "194"
down_revision = "193"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.create_table(
        "project_auth_audit_events",
        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
        sa.Column(
            "project_id",
            postgresql.UUID(as_uuid=True),
            sa.ForeignKey("projects.id", ondelete="CASCADE"),
            nullable=False,
        ),
        sa.Column("event", sa.Text(), nullable=False),
        sa.Column("actor_membership_id", postgresql.UUID(as_uuid=True), nullable=True),
        sa.Column("target_membership_id", postgresql.UUID(as_uuid=True), nullable=True),
        sa.Column("payload", postgresql.JSONB(), nullable=False, server_default="{}"),
        sa.Column("correlation_id", sa.Text(), nullable=True),
        sa.Column(
            "created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False
        ),
    )
    op.create_index(
        "ix_project_auth_audit_events_project_created",
        "project_auth_audit_events",
        ["project_id", "created_at"],
    )


def downgrade() -> None:
    op.drop_index(
        "ix_project_auth_audit_events_project_created", table_name="project_auth_audit_events"
    )
    op.drop_table("project_auth_audit_events")