"""Immutable audit trail model."""

from datetime import UTC, datetime

from sqlalchemy import DateTime, String, Text
from sqlalchemy.orm import Mapped, mapped_column

from app.core.database import Base


class AuditLog(Base):
    __tablename__ = "audit_logs"

    id: Mapped[int] = mapped_column(primary_key=True)
    timestamp: Mapped[datetime] = mapped_column(
        DateTime(timezone=True), default=lambda: datetime.now(UTC), index=True
    )
    username: Mapped[str] = mapped_column(String(255), index=True)
    action: Mapped[str] = mapped_column(String(100), index=True)  # e.g. server.create
    target: Mapped[str | None] = mapped_column(String(255), nullable=True)  # e.g. server name
    result: Mapped[str] = mapped_column(String(50), default="success")  # success | failure
    details: Mapped[str | None] = mapped_column(Text, nullable=True)  # JSON blob
    ip_address: Mapped[str | None] = mapped_column(String(45), nullable=True)