from __future__ import annotations

import uuid
from typing import Any

from datetime import datetime

from sqlalchemy import BigInteger, Boolean, DateTime, ForeignKey, Index, Integer, JSON, String, Text, UniqueConstraint
from sqlalchemy.orm import Mapped, mapped_column

from govoplan_core.db.base import Base, TimestampMixin
from govoplan_core.security import credential_envelopes as core_credential_models  # noqa: F401


def new_uuid() -> str:
    return str(uuid.uuid4())


class MailServerProfile(Base, TimestampMixin):
    __tablename__ = "mail_server_profiles"
    __table_args__ = (
        UniqueConstraint("tenant_id", "slug", name="uq_mail_server_profiles_tenant_slug"),
        Index("ix_mail_server_profiles_scope", "scope_type", "scope_id"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    tenant_id: Mapped[str | None] = mapped_column(String(36), nullable=True, index=True)
    scope_type: Mapped[str] = mapped_column(String(20), default="tenant", nullable=False, index=True)
    scope_id: Mapped[str | None] = mapped_column(String(36), nullable=True, index=True)
    name: Mapped[str] = mapped_column(String(255), nullable=False)
    slug: Mapped[str] = mapped_column(String(100), nullable=False)
    description: Mapped[str | None] = mapped_column(Text)
    is_active: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False, index=True)
    inherit_to_lower_scopes: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False)
    smtp_config: Mapped[dict[str, Any]] = mapped_column(JSON, default=dict, nullable=False)
    smtp_username: Mapped[str | None] = mapped_column(String(320))
    smtp_password_encrypted: Mapped[str | None] = mapped_column(Text)
    smtp_transport_revision: Mapped[str] = mapped_column(String(36), default=new_uuid, nullable=False)
    imap_config: Mapped[dict[str, Any] | None] = mapped_column(JSON, nullable=True)
    imap_username: Mapped[str | None] = mapped_column(String(320))
    imap_password_encrypted: Mapped[str | None] = mapped_column(Text)
    imap_transport_revision: Mapped[str] = mapped_column(String(36), default=new_uuid, nullable=False)
    created_by_user_id: Mapped[str | None] = mapped_column(ForeignKey("access_users.id", ondelete="SET NULL"), nullable=True, index=True)
    updated_by_user_id: Mapped[str | None] = mapped_column(ForeignKey("access_users.id", ondelete="SET NULL"), nullable=True, index=True)


class MailServerEndpoint(Base, TimestampMixin):
    __tablename__ = "mail_server_endpoints"
    __table_args__ = (
        UniqueConstraint("profile_id", "protocol", "name", name="uq_mail_server_endpoints_profile_protocol_name"),
        Index("ix_mail_server_endpoints_profile_protocol", "profile_id", "protocol", "is_active"),
        Index("ix_mail_server_endpoints_scope", "tenant_id", "scope_type", "scope_id"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    profile_id: Mapped[str] = mapped_column(
        ForeignKey("mail_server_profiles.id", ondelete="CASCADE"),
        nullable=False,
        index=True,
    )
    tenant_id: Mapped[str | None] = mapped_column(String(36), nullable=True, index=True)
    protocol: Mapped[str] = mapped_column(String(20), nullable=False, index=True)
    name: Mapped[str] = mapped_column(String(255), nullable=False)
    config: Mapped[dict[str, Any]] = mapped_column(JSON, default=dict, nullable=False)
    scope_type: Mapped[str] = mapped_column(String(20), default="tenant", nullable=False, index=True)
    scope_id: Mapped[str | None] = mapped_column(String(36), nullable=True, index=True)
    inherit_to_lower_scopes: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False)
    is_default: Mapped[bool] = mapped_column(Boolean, default=False, nullable=False, index=True)
    is_active: Mapped[bool] = mapped_column(Boolean, default=True, nullable=False, index=True)
    transport_revision: Mapped[str] = mapped_column(String(36), default=new_uuid, nullable=False)
    created_by_user_id: Mapped[str | None] = mapped_column(ForeignKey("access_users.id", ondelete="SET NULL"), nullable=True, index=True)
    updated_by_user_id: Mapped[str | None] = mapped_column(ForeignKey("access_users.id", ondelete="SET NULL"), nullable=True, index=True)


class MailServerCredentialBinding(Base, TimestampMixin):
    __tablename__ = "mail_server_credential_bindings"
    __table_args__ = (
        UniqueConstraint("server_id", "credential_id", name="uq_mail_server_credential_bindings_server_credential"),
        Index("ix_mail_server_credential_bindings_default", "server_id", "is_default"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    server_id: Mapped[str] = mapped_column(
        ForeignKey("mail_server_endpoints.id", ondelete="CASCADE"),
        nullable=False,
        index=True,
    )
    credential_id: Mapped[str] = mapped_column(
        ForeignKey("core_credential_envelopes.id", ondelete="CASCADE"),
        nullable=False,
        index=True,
    )
    is_default: Mapped[bool] = mapped_column(Boolean, default=False, nullable=False, index=True)
    created_by_user_id: Mapped[str | None] = mapped_column(ForeignKey("access_users.id", ondelete="SET NULL"), nullable=True, index=True)


class MailProfilePolicy(Base, TimestampMixin):
    __tablename__ = "mail_profile_policies"
    __table_args__ = (
        UniqueConstraint("tenant_id", "scope_type", "scope_id", name="uq_mail_profile_policies_scope"),
        Index("ix_mail_profile_policies_scope", "scope_type", "scope_id"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    tenant_id: Mapped[str | None] = mapped_column(String(36), nullable=True, index=True)
    scope_type: Mapped[str] = mapped_column(String(20), nullable=False, index=True)
    scope_id: Mapped[str | None] = mapped_column(String(36), nullable=True, index=True)
    policy: Mapped[dict[str, Any]] = mapped_column(JSON, default=dict, nullable=False)


class MailMailboxFolderIndex(Base, TimestampMixin):
    __tablename__ = "mail_mailbox_folder_index"
    __table_args__ = (
        UniqueConstraint("profile_id", "folder", name="uq_mail_mailbox_folder_index_profile_folder"),
        Index("ix_mail_mailbox_folder_index_tenant_profile", "tenant_id", "profile_id"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    tenant_id: Mapped[str] = mapped_column(String(36), nullable=False, index=True)
    profile_id: Mapped[str] = mapped_column(ForeignKey("mail_server_profiles.id", ondelete="CASCADE"), nullable=False, index=True)
    folder: Mapped[str] = mapped_column(String(255), nullable=False, index=True)
    flags: Mapped[list[str]] = mapped_column(JSON, default=list, nullable=False)
    message_count: Mapped[int | None] = mapped_column(Integer, nullable=True)
    unseen_count: Mapped[int | None] = mapped_column(Integer, nullable=True)
    uidvalidity: Mapped[str | None] = mapped_column(String(255), nullable=True)
    indexed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True, index=True)
    message_indexed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True, index=True)


class MailMailboxMessageIndex(Base, TimestampMixin):
    __tablename__ = "mail_mailbox_message_index"
    __table_args__ = (
        UniqueConstraint("profile_id", "folder", "uid", name="uq_mail_mailbox_message_index_profile_folder_uid"),
        Index("ix_mail_mailbox_message_index_page", "tenant_id", "profile_id", "folder", "sort_position"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    tenant_id: Mapped[str] = mapped_column(String(36), nullable=False, index=True)
    profile_id: Mapped[str] = mapped_column(ForeignKey("mail_server_profiles.id", ondelete="CASCADE"), nullable=False, index=True)
    folder: Mapped[str] = mapped_column(String(255), nullable=False, index=True)
    uid: Mapped[str] = mapped_column(String(255), nullable=False)
    uid_int: Mapped[int] = mapped_column(BigInteger, default=0, nullable=False, index=True)
    sort_position: Mapped[int] = mapped_column(BigInteger, default=0, nullable=False, index=True)
    subject: Mapped[str | None] = mapped_column(Text, nullable=True)
    from_header: Mapped[str | None] = mapped_column(Text, nullable=True)
    to_header: Mapped[str | None] = mapped_column(Text, nullable=True)
    cc_header: Mapped[str | None] = mapped_column(Text, nullable=True)
    date: Mapped[str | None] = mapped_column(String(255), nullable=True)
    message_id: Mapped[str | None] = mapped_column(Text, nullable=True)
    flags: Mapped[list[str]] = mapped_column(JSON, default=list, nullable=False)
    size_bytes: Mapped[int | None] = mapped_column(Integer, nullable=True)
    body_preview: Mapped[str | None] = mapped_column(Text, nullable=True)
    attachment_count: Mapped[int] = mapped_column(Integer, default=0, nullable=False)
    indexed_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), nullable=False, index=True)


class MailDeliveryCommand(Base, TimestampMixin):
    __tablename__ = "mail_delivery_commands"
    __table_args__ = (
        UniqueConstraint(
            "tenant_id",
            "command_type",
            "idempotency_key",
            name="uq_mail_delivery_commands_idempotency",
        ),
        Index(
            "ix_mail_delivery_commands_dispatch",
            "status",
            "next_attempt_at",
            "created_at",
        ),
        Index(
            "ix_mail_delivery_commands_source",
            "tenant_id",
            "source_module",
            "source_resource_type",
            "source_resource_id",
        ),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    tenant_id: Mapped[str] = mapped_column(String(36), nullable=False, index=True)
    command_type: Mapped[str] = mapped_column(String(60), nullable=False, index=True)
    source_module: Mapped[str] = mapped_column(String(80), nullable=False, index=True)
    source_resource_type: Mapped[str] = mapped_column(String(80), nullable=False)
    source_resource_id: Mapped[str | None] = mapped_column(String(120), nullable=True)
    source_version_id: Mapped[str | None] = mapped_column(String(120), nullable=True)
    idempotency_key: Mapped[str] = mapped_column(String(200), nullable=False)
    canonical_request_hash: Mapped[str] = mapped_column(String(64), nullable=False)
    profile_id: Mapped[str] = mapped_column(
        ForeignKey("mail_server_profiles.id", ondelete="RESTRICT"),
        nullable=False,
        index=True,
    )
    smtp_server_id: Mapped[str | None] = mapped_column(String(36), nullable=True)
    smtp_credential_id: Mapped[str | None] = mapped_column(String(36), nullable=True)
    expected_smtp_transport_revision: Mapped[str] = mapped_column(String(120), nullable=False)
    envelope_from_encrypted: Mapped[str | None] = mapped_column(Text, nullable=True)
    envelope_recipients_encrypted: Mapped[str | None] = mapped_column(Text, nullable=True)
    from_header_encrypted: Mapped[str | None] = mapped_column(Text, nullable=True)
    message_encrypted: Mapped[str | None] = mapped_column(Text, nullable=True)
    message_sha256: Mapped[str] = mapped_column(String(64), nullable=False)
    message_size_bytes: Mapped[int] = mapped_column(BigInteger, nullable=False)
    recipient_count: Mapped[int] = mapped_column(Integer, nullable=False)
    status: Mapped[str] = mapped_column(String(40), nullable=False, default="pending", index=True)
    attempt_count: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
    next_attempt_at: Mapped[datetime | None] = mapped_column(
        DateTime(timezone=True),
        nullable=True,
        index=True,
    )
    claimed_by: Mapped[str | None] = mapped_column(String(255), nullable=True)
    claimed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    effect_started_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    completed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    accepted_count: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
    refused_count: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
    refusal_summary: Mapped[dict[str, Any]] = mapped_column(JSON, nullable=False, default=dict)
    refusal_details_encrypted: Mapped[str | None] = mapped_column(Text, nullable=True)
    failure_code: Mapped[str | None] = mapped_column(String(80), nullable=True)
    failure_summary: Mapped[str | None] = mapped_column(String(500), nullable=True)
    created_by_user_id: Mapped[str | None] = mapped_column(
        ForeignKey("access_users.id", ondelete="SET NULL"),
        nullable=True,
        index=True,
    )
    supersedes_command_id: Mapped[str | None] = mapped_column(
        ForeignKey("mail_delivery_commands.id", ondelete="SET NULL"),
        nullable=True,
        index=True,
    )
    expires_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), nullable=False, index=True)
    payload_purged_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)


class MailDeliveryAttempt(Base, TimestampMixin):
    __tablename__ = "mail_delivery_attempts"
    __table_args__ = (
        UniqueConstraint(
            "command_id",
            "attempt_number",
            name="uq_mail_delivery_attempts_number",
        ),
        Index("ix_mail_delivery_attempts_command_started", "command_id", "started_at"),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    command_id: Mapped[str] = mapped_column(
        ForeignKey("mail_delivery_commands.id", ondelete="CASCADE"),
        nullable=False,
        index=True,
    )
    attempt_number: Mapped[int] = mapped_column(Integer, nullable=False)
    worker_id: Mapped[str | None] = mapped_column(String(255), nullable=True)
    status: Mapped[str] = mapped_column(String(40), nullable=False, index=True)
    started_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), nullable=False)
    effect_started_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    completed_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
    accepted_count: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
    refused_count: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
    outcome_code: Mapped[str | None] = mapped_column(String(80), nullable=True)
    diagnostic_summary: Mapped[str | None] = mapped_column(String(500), nullable=True)


class MailDeliveryReconciliation(Base, TimestampMixin):
    __tablename__ = "mail_delivery_reconciliations"
    __table_args__ = (
        Index(
            "ix_mail_delivery_reconciliations_command_created",
            "command_id",
            "created_at",
        ),
    )

    id: Mapped[str] = mapped_column(String(36), primary_key=True, default=new_uuid)
    command_id: Mapped[str] = mapped_column(
        ForeignKey("mail_delivery_commands.id", ondelete="CASCADE"),
        nullable=False,
        index=True,
    )
    decision: Mapped[str] = mapped_column(String(40), nullable=False)
    evidence_reference: Mapped[str] = mapped_column(String(500), nullable=False)
    note_encrypted: Mapped[str | None] = mapped_column(Text, nullable=True)
    created_by_user_id: Mapped[str | None] = mapped_column(
        ForeignKey("access_users.id", ondelete="SET NULL"),
        nullable=True,
        index=True,
    )