"""底层安全访问日志模型"""

from __future__ import annotations

import uuid
from datetime import datetime
from typing import Optional

from sqlalchemy import DateTime, Float, Index, Integer, String
from sqlalchemy.dialects.postgresql import UUID
from sqlalchemy.orm import Mapped, mapped_column
from sqlalchemy.sql import func

from app.db.base_class import Base


class SecurityAccessLog(Base):
    __tablename__ = "security_access_logs"
    __table_args__ = (
        Index("ix_security_log_created_at", "created_at"),
        Index("ix_security_log_ip_created", "client_ip", "created_at"),
        Index("ix_security_log_status_created", "status_code", "created_at"),
        Index("ix_security_log_auth_created", "auth_status", "created_at"),
    )

    id: Mapped[uuid.UUID] = mapped_column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
    method: Mapped[str] = mapped_column(String(12), nullable=False)
    path: Mapped[str] = mapped_column(String(500), nullable=False)
    status_code: Mapped[int] = mapped_column(Integer, nullable=False)
    elapsed_ms: Mapped[float] = mapped_column(Float, nullable=False)
    client_ip: Mapped[Optional[str]] = mapped_column(String(45), nullable=True)
    user_agent: Mapped[Optional[str]] = mapped_column(String(500), nullable=True)
    client_type: Mapped[Optional[str]] = mapped_column(String(16), nullable=True)
    client_version: Mapped[Optional[str]] = mapped_column(String(32), nullable=True)
    client_platform: Mapped[Optional[str]] = mapped_column(String(16), nullable=True)
    build_channel: Mapped[Optional[str]] = mapped_column(String(16), nullable=True)
    build_commit: Mapped[Optional[str]] = mapped_column(String(64), nullable=True)
    auth_status: Mapped[str] = mapped_column(String(30), nullable=False)
    user_identifier: Mapped[Optional[str]] = mapped_column(String(80), nullable=True)
    created_at: Mapped[datetime] = mapped_column(
        DateTime(timezone=True), nullable=False, server_default=func.now()
    )