"""add system secrets table

Revision ID: 8db5bd1c31f8
Revises: 6d296b533f7c
Create Date: 2026-08-05 07:48:50.750288

"""

from __future__ import annotations

from collections.abc import Sequence

import sqlalchemy as sa
from alembic import op

revision: str = "8db5bd1c31f8"
down_revision: str | None = "6d296b533f7c"
branch_labels: Sequence[str] | str | None = None
depends_on: Sequence[str] | str | None = None


def upgrade() -> None:
    op.create_table(
        "system_secrets",
        sa.Column(
            "key",
            sa.Enum(
                "TURNSTILE_SITE_KEY",
                "TURNSTILE_SECRET",
                name="systemsecretkey",
                native_enum=False,
                length=32,
            ),
            nullable=False,
        ),
        sa.Column("encrypted_value", sa.Text(), nullable=False),
        sa.Column("id", sa.Uuid(), nullable=False),
        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
        sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
        sa.PrimaryKeyConstraint("id"),
        sa.UniqueConstraint("key"),
    )


def downgrade() -> None:
    op.drop_table("system_secrets")