"""Add governed active-production execution operations."""

from alembic import op

revision = "20260724_260"
down_revision = "20260724_250"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.execute(
        """
        ALTER TABLE public.dataflow_deployment_operations
            DROP CONSTRAINT dataflow_deployment_operations_action_check;
        ALTER TABLE public.dataflow_deployment_operations
            ADD CONSTRAINT dataflow_deployment_operations_action_check
            CHECK (action IN (
                'deploy_disabled','run_canary','activate','rollback',
                'execute_active'
            ));
        """
    )


def downgrade() -> None:
    raise RuntimeError("active production execution audit is forward-only")