"""
Audit logging models
"""
from sqlalchemy import Column, Integer, String, Text, DateTime, ForeignKey, JSON
from sqlalchemy.orm import relationship
from datetime import datetime
from app.models.base import BaseModel


class AuditLog(BaseModel):
    """
    Audit log for tracking user actions and system events
    """
    __tablename__ = "audit_logs"
    
    id = Column(Integer, primary_key=True, autoincrement=True, index=True)
    user_id = Column(Integer, ForeignKey("users.id"), nullable=True)  # Nullable for system events
    username = Column(String(100), nullable=True)  # Store username for deleted users
    action = Column(String(100), nullable=False)  # Action performed (CREATE, UPDATE, DELETE, LOGIN, etc.)
    resource_type = Column(String(50), nullable=False)  # Type of resource (USER, CUSTOMER, FILE, etc.)
    resource_id = Column(String(100), nullable=True)  # ID of the affected resource
    details = Column(JSON, nullable=True)  # Additional details as JSON
    ip_address = Column(String(45), nullable=True)  # IPv4/IPv6 address
    user_agent = Column(Text, nullable=True)  # Browser/client information
    timestamp = Column(DateTime, default=datetime.utcnow, nullable=False, index=True)
    
    # Relationships
    user = relationship("User", back_populates="audit_logs")
    
    def __repr__(self):
        return f"<AuditLog(id={self.id}, user='{self.username}', action='{self.action}', resource='{self.resource_type}')>"


class LoginAttempt(BaseModel):
    """
    Track login attempts for security monitoring
    """
    __tablename__ = "login_attempts"
    
    id = Column(Integer, primary_key=True, autoincrement=True, index=True)
    username = Column(String(100), nullable=False, index=True)
    ip_address = Column(String(45), nullable=False)
    user_agent = Column(Text, nullable=True)
    success = Column(Integer, default=0)  # 1 for success, 0 for failure
    timestamp = Column(DateTime, default=datetime.utcnow, nullable=False, index=True)
    failure_reason = Column(String(200), nullable=True)  # Reason for failure
    
    def __repr__(self):
        return f"<LoginAttempt(username='{self.username}', success={bool(self.success)}, timestamp='{self.timestamp}')>"