"""Desktop auth, user-owned devices, local-execution gate, claim metadata.

Revision ID: 083
Revises: 082
"""
from typing import Sequence, Union

import sqlalchemy as sa
from alembic import op
from sqlalchemy.dialects import postgresql

revision: str = "083"
down_revision: Union[str, None] = "082"
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None


def upgrade() -> None:
    op.create_table(
        "desktop_auth_requests",
        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
        sa.Column("login_code", sa.String(64), nullable=False, unique=True),
        sa.Column("user_code", sa.String(16), nullable=False),
        sa.Column("status", sa.String(20), nullable=False, server_default="pending"),
        sa.Column(
            "user_id",
            postgresql.UUID(as_uuid=True),
            sa.ForeignKey("users.id", ondelete="CASCADE"),
            nullable=True,
        ),
        sa.Column("app_name", sa.String(100), nullable=True),
        sa.Column("os", sa.String(20), nullable=True),
        sa.Column("expires_at", sa.DateTime(timezone=True), nullable=False),
        sa.Column("completed_at", sa.DateTime(timezone=True), nullable=True),
        sa.Column("exchanged_at", sa.DateTime(timezone=True), nullable=True),
        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
    )
    op.create_index("ix_desktop_auth_requests_login_code", "desktop_auth_requests", ["login_code"])
    op.create_index("ix_desktop_auth_requests_user_code", "desktop_auth_requests", ["user_code"])

    op.create_table(
        "desktop_handoff_tokens",
        sa.Column("id", postgresql.UUID(as_uuid=True), primary_key=True),
        sa.Column("token_hash", sa.String(64), nullable=False, unique=True),
        sa.Column(
            "user_id",
            postgresql.UUID(as_uuid=True),
            sa.ForeignKey("users.id", ondelete="CASCADE"),
            nullable=False,
        ),
        sa.Column("next_path", sa.String(255), nullable=False),
        sa.Column("expires_at", sa.DateTime(timezone=True), nullable=False),
        sa.Column("used_at", sa.DateTime(timezone=True), nullable=True),
        sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()),
    )
    op.create_index("ix_desktop_handoff_tokens_token_hash", "desktop_handoff_tokens", ["token_hash"])

    op.drop_constraint("devices_workspace_id_fkey", "devices", type_="foreignkey")
    op.alter_column("devices", "workspace_id", new_column_name="last_workspace_id")
    op.create_foreign_key(
        "devices_last_workspace_id_fkey",
        "devices",
        "workspaces",
        ["last_workspace_id"],
        ["id"],
        ondelete="SET NULL",
    )
    op.drop_index("ix_devices_workspace_id", table_name="devices")
    op.create_index("ix_devices_last_workspace_id", "devices", ["last_workspace_id"])
    op.create_index("ix_devices_user_id", "devices", ["user_id"])

    op.add_column(
        "codegen_runs",
        sa.Column("claimed_at", sa.DateTime(timezone=True), nullable=True),
    )

    op.add_column(
        "workspace_settings",
        sa.Column(
            "local_execution_enabled",
            sa.Boolean(),
            nullable=False,
            server_default=sa.false(),
        ),
    )

    op.execute(
        """
        UPDATE roles
        SET permissions = array_append(permissions, 'codegen.run.desktop')
        WHERE workspace_id IS NULL
          AND is_system IS TRUE
          AND LOWER(name) IN ('owner', 'admin')
          AND NOT ('codegen.run.desktop' = ANY(permissions));
        """
    )


def downgrade() -> None:
    op.execute(
        """
        UPDATE roles
        SET permissions = array_remove(permissions, 'codegen.run.desktop')
        WHERE workspace_id IS NULL
          AND is_system IS TRUE
          AND LOWER(name) IN ('owner', 'admin');
        """
    )
    op.drop_column("workspace_settings", "local_execution_enabled")
    op.drop_column("codegen_runs", "claimed_at")

    op.drop_index("ix_devices_user_id", table_name="devices")
    op.drop_index("ix_devices_last_workspace_id", table_name="devices")
    op.drop_constraint("devices_last_workspace_id_fkey", "devices", type_="foreignkey")
    op.alter_column("devices", "last_workspace_id", new_column_name="workspace_id")
    op.create_foreign_key(
        "devices_workspace_id_fkey",
        "devices",
        "workspaces",
        ["workspace_id"],
        ["id"],
        ondelete="CASCADE",
    )
    op.create_index("ix_devices_workspace_id", "devices", ["workspace_id"])

    op.drop_index("ix_desktop_handoff_tokens_token_hash", table_name="desktop_handoff_tokens")
    op.drop_table("desktop_handoff_tokens")
    op.drop_index("ix_desktop_auth_requests_user_code", table_name="desktop_auth_requests")
    op.drop_index("ix_desktop_auth_requests_login_code", table_name="desktop_auth_requests")
    op.drop_table("desktop_auth_requests")