-- Increment 3->4 migration (run once)
ALTER TABLE licenses ADD sso_secret CHAR(64) NULL,ADD sso_required TINYINT DEFAULT 0,ADD record_url VARCHAR(300) NULL,ADD retention_days INT DEFAULT 0;
UPDATE licenses SET sso_secret=SHA2(CONCAT(RAND(),UUID()),256) WHERE sso_secret IS NULL;
ALTER TABLE agents ADD active TINYINT DEFAULT 1;
ALTER TABLE conversations ADD ext_role VARCHAR(30) NULL;
CREATE TABLE webhooks(id INT AUTO_INCREMENT PRIMARY KEY,license_id INT NOT NULL,url VARCHAR(300),secret CHAR(32),events VARCHAR(200) DEFAULT '*',active TINYINT DEFAULT 1,last_status VARCHAR(40) NULL,last_at DATETIME NULL);
CREATE TABLE access_log(id INT AUTO_INCREMENT PRIMARY KEY,license_id INT,agent_id INT NULL,action VARCHAR(30),conversation_id INT NULL,detail VARCHAR(190) NULL,created_at DATETIME,INDEX(license_id,created_at));