"""Add persistent administrative authentication rate limit."""

from alembic import op
import sqlalchemy as sa

revision = "0014"
down_revision = "20260910_recovery"
branch_labels = None
depends_on = None


def upgrade() -> None:
    op.create_table(
        "admin_auth_attempt",
        sa.Column("id", sa.Uuid(), nullable=False),
        sa.Column("client_hash", sa.String(length=64), nullable=False),
        sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
        sa.PrimaryKeyConstraint("id"),
    )
    op.create_index("ix_admin_auth_attempt_client_hash", "admin_auth_attempt", ["client_hash"])
    op.create_index("ix_admin_auth_attempt_created_at", "admin_auth_attempt", ["created_at"])


def downgrade() -> None:
    op.drop_index("ix_admin_auth_attempt_created_at", table_name="admin_auth_attempt")
    op.drop_index("ix_admin_auth_attempt_client_hash", table_name="admin_auth_attempt")
    op.drop_table("admin_auth_attempt")