"""add security access logs

Revision ID: 20260520_01
Revises: 20260519_01
Create Date: 2026-05-20 10:40:00.000000

"""

from typing import Sequence, Union

import sqlalchemy as sa
from sqlalchemy.dialects import postgresql
from alembic import op

revision: str = "20260520_01"
down_revision: Union[str, None] = "20260519_01"
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None


def upgrade() -> None:
    op.create_table(
        "security_access_logs",
        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
        sa.Column("method", sa.String(12), nullable=False),
        sa.Column("path", sa.String(500), nullable=False),
        sa.Column("status_code", sa.Integer(), nullable=False),
        sa.Column("elapsed_ms", sa.Float(), nullable=False),
        sa.Column("client_ip", sa.String(45), nullable=True),
        sa.Column("user_agent", sa.String(500), nullable=True),
        sa.Column("auth_status", sa.String(30), nullable=False),
        sa.Column("user_identifier", sa.String(80), nullable=True),
        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False, server_default=sa.func.now()),
    )
    op.create_index("ix_security_log_created_at", "security_access_logs", ["created_at"])
    op.create_index("ix_security_log_ip_created", "security_access_logs", ["client_ip", "created_at"])
    op.create_index("ix_security_log_status_created", "security_access_logs", ["status_code", "created_at"])
    op.create_index("ix_security_log_auth_created", "security_access_logs", ["auth_status", "created_at"])


def downgrade() -> None:
    op.drop_table("security_access_logs")