"""AuditLog and DeletionLog models.""" from __future__ import annotations import uuid from datetime import datetime from typing import Any from sqlalchemy import String, DateTime, ForeignKey, func, Text from sqlalchemy.dialects.postgresql import UUID as PGUUID, JSONB from sqlalchemy.orm import Mapped, mapped_column from app.core.db import Base, TenantMixin class AuditLog(Base, TenantMixin): """Audit trail for all create/update/delete/login actions.""" __tablename__ = "audit_log" id: Mapped[uuid.UUID] = mapped_column( PGUUID(as_uuid=True), primary_key=True, default=uuid.uuid4 ) user_id: Mapped[uuid.UUID | None] = mapped_column( PGUUID(as_uuid=True), ForeignKey("users.id", ondelete="SET NULL"), nullable=True, index=True ) action: Mapped[str] = mapped_column(String(50), nullable=False) entity_type: Mapped[str] = mapped_column(String(50), nullable=False, index=True) entity_id: Mapped[uuid.UUID | None] = mapped_column(PGUUID(as_uuid=True), nullable=True) changes: Mapped[dict[str, Any] | None] = mapped_column(JSONB, nullable=True) timestamp: Mapped[datetime] = mapped_column( DateTime(timezone=True), nullable=False, server_default=func.now(), index=True ) class DeletionLog(Base, TenantMixin): """Immutable record of deleted entities (for forensic recovery).""" __tablename__ = "deletion_log" id: Mapped[uuid.UUID] = mapped_column( PGUUID(as_uuid=True), primary_key=True, default=uuid.uuid4 ) user_id: Mapped[uuid.UUID | None] = mapped_column( PGUUID(as_uuid=True), ForeignKey("users.id", ondelete="SET NULL"), nullable=True ) entity_type: Mapped[str] = mapped_column(String(50), nullable=False) entity_id: Mapped[uuid.UUID] = mapped_column(PGUUID(as_uuid=True), nullable=False) entity_snapshot: Mapped[dict[str, Any]] = mapped_column(JSONB, nullable=False) deleted_at: Mapped[datetime] = mapped_column( DateTime(timezone=True), nullable=False, server_default=func.now() )