"""User-owned Azure DevOps connections and per-project mirror targets."""
from __future__ import annotations

from datetime import datetime
from typing import Optional
from uuid import UUID, uuid4

import sqlalchemy as sa
from sqlalchemy import Boolean, ForeignKey, String, Text
from sqlalchemy.dialects.postgresql import UUID as PGUUID
from sqlalchemy.orm import Mapped, mapped_column
from sqlalchemy.sql import func
from sqlalchemy.types import DateTime

from src.core.database import Base


class WorkspaceUserAzureConnection(Base):
    __tablename__ = "workspace_user_azure_connections"
    __table_args__ = (
        sa.UniqueConstraint(
            "workspace_id",
            "azure_org_url",
            name="uq_workspace_user_azure_connection_workspace_org",
        ),
    )

    id: Mapped[UUID] = mapped_column(PGUUID(as_uuid=True), primary_key=True, default=uuid4)
    workspace_id: Mapped[UUID] = mapped_column(
        PGUUID(as_uuid=True), ForeignKey("workspaces.id", ondelete="CASCADE"), nullable=False
    )
    azure_org_url: Mapped[str] = mapped_column(String(512), nullable=False)
    username: Mapped[str] = mapped_column(String(255), nullable=False)
    display_name: Mapped[Optional[str]] = mapped_column(String(255), nullable=True)
    auth_type: Mapped[str] = mapped_column(String(20), nullable=False, server_default="pat")
    pat_ciphertext: Mapped[str] = mapped_column(Text, nullable=False)
    access_token_ciphertext: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
    refresh_token_ciphertext: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
    token_expires_at: Mapped[Optional[datetime]] = mapped_column(
        DateTime(timezone=True), nullable=True
    )
    created_by: Mapped[Optional[UUID]] = mapped_column(
        PGUUID(as_uuid=True), ForeignKey("users.id"), nullable=True
    )
    revoked_at: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True)
    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
    updated_at: Mapped[datetime] = mapped_column(
        DateTime(timezone=True), server_default=func.now(), onupdate=func.now()
    )


class ProjectUserAzureMirrorTarget(Base):
    __tablename__ = "project_user_azure_mirror_targets"

    id: Mapped[UUID] = mapped_column(PGUUID(as_uuid=True), primary_key=True, default=uuid4)
    project_id: Mapped[UUID] = mapped_column(
        PGUUID(as_uuid=True),
        ForeignKey("projects.id", ondelete="CASCADE"),
        nullable=False,
        unique=True,
    )
    workspace_user_azure_connection_id: Mapped[UUID] = mapped_column(
        PGUUID(as_uuid=True),
        ForeignKey("workspace_user_azure_connections.id", ondelete="CASCADE"),
        nullable=False,
    )
    target_repo_full_name: Mapped[str] = mapped_column(String(512), nullable=False)
    target_repo_id: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
    target_default_branch: Mapped[str] = mapped_column(
        String(100), nullable=False, server_default="main"
    )
    enabled: Mapped[bool] = mapped_column(Boolean, nullable=False, server_default=sa.true())
    last_push_sha: Mapped[Optional[str]] = mapped_column(String(40), nullable=True)
    last_error: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
    target_repo_webhook_id: Mapped[Optional[str]] = mapped_column(Text, nullable=True)
    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
    updated_at: Mapped[datetime] = mapped_column(
        DateTime(timezone=True), server_default=func.now(), onupdate=func.now()
    )