New enterprise feature

services/tenant/app/models/tenants.py

@@ -56,6 +56,11 @@ class Tenant(Base):
     # Ownership (user_id without FK - cross-service reference)
     owner_id = Column(UUID(as_uuid=True), nullable=False, index=True)
 
+    # Enterprise tier hierarchy fields
+    parent_tenant_id = Column(UUID(as_uuid=True), ForeignKey("tenants.id", ondelete="RESTRICT"), nullable=True, index=True)
+    tenant_type = Column(String(50), default="standalone", nullable=False)  # standalone, parent, child
+    hierarchy_path = Column(String(500), nullable=True)  # Materialized path for queries
+
     # Timestamps
     created_at = Column(DateTime(timezone=True), default=lambda: datetime.now(timezone.utc))
     updated_at = Column(DateTime(timezone=True), default=lambda: datetime.now(timezone.utc), onupdate=lambda: datetime.now(timezone.utc))
@@ -63,6 +68,9 @@ class Tenant(Base):
     # Relationships - only within tenant service
     members = relationship("TenantMember", back_populates="tenant", cascade="all, delete-orphan")
     subscriptions = relationship("Subscription", back_populates="tenant", cascade="all, delete-orphan")
+    locations = relationship("TenantLocation", back_populates="tenant", cascade="all, delete-orphan")
+    child_tenants = relationship("Tenant", back_populates="parent_tenant", remote_side=[id])
+    parent_tenant = relationship("Tenant", back_populates="child_tenants", remote_side=[parent_tenant_id])
 
     # REMOVED: users relationship - no cross-service SQLAlchemy relationships
 
@@ -115,7 +123,7 @@ class TenantMember(Base):
     user_id = Column(UUID(as_uuid=True), nullable=False, index=True)  # No FK - cross-service reference
 
     # Role and permissions specific to this tenant
-    # Valid values: 'owner', 'admin', 'member', 'viewer'
+    # Valid values: 'owner', 'admin', 'member', 'viewer', 'network_admin'
     role = Column(String(50), default="member")
     permissions = Column(Text)  # JSON string of permissions