from sqlalchemy import Column, Integer, String, Boolean, DateTime, ForeignKey, Enum, Text
from sqlalchemy.orm import relationship
from sqlalchemy.sql import func
from app.core.database import Base
import enum


class UserRole(str, enum.Enum):
    """用户角色枚举"""
    SUPER_ADMIN = "super_admin"  # 超级管理员 - 所有权限
    ADMIN = "admin"              # 管理员 - 除用户管理外的所有权限
    OPERATOR = "operator"        # 操作员 - 可查看和操作，不能配置
    VIEWER = "viewer"            # 只读用户 - 只能查看


class UserStatus(str, enum.Enum):
    """用户状态"""
    ACTIVE = "active"        # 正常
    INACTIVE = "inactive"    # 禁用
    LOCKED = "locked"        # 锁定（登录失败过多）


class User(Base):
    """用户表"""
    __tablename__ = "users"

    id = Column(Integer, primary_key=True, index=True)
    username = Column(String(50), unique=True, index=True, nullable=False)
    email = Column(String(100), unique=True, index=True)
    phone = Column(String(20), index=True)
    real_name = Column(String(50), comment="真实姓名")
    
    password_hash = Column(String(255), nullable=False)
    
    role = Column(Enum(UserRole), default=UserRole.VIEWER, nullable=False)
    status = Column(Enum(UserStatus), default=UserStatus.ACTIVE, nullable=False)
    
    # 登录信息
    last_login_at = Column(DateTime(timezone=True))
    last_login_ip = Column(String(50))
    login_failed_count = Column(Integer, default=0)
    
    # 通知配置
    email_notification = Column(Boolean, default=True)
    wechat_notification = Column(Boolean, default=False)
    dingtalk_notification = Column(Boolean, default=False)
    
    created_by = Column(Integer, ForeignKey("users.id"), nullable=True)
    created_at = Column(DateTime(timezone=True), server_default=func.now())
    updated_at = Column(DateTime(timezone=True), onupdate=func.now())

    # 关系
    creator = relationship("User", remote_side=[id])


class Permission(Base):
    """权限项"""
    __tablename__ = "permissions"

    id = Column(Integer, primary_key=True, index=True)
    code = Column(String(100), unique=True, nullable=False, comment="权限代码，如：network:create")
    name = Column(String(100), nullable=False, comment="权限名称")
    description = Column(Text)
    category = Column(String(50), comment="权限分类：network, ip, scan, snmp, alert, system")
    
    created_at = Column(DateTime(timezone=True), server_default=func.now())


class RolePermission(Base):
    """角色权限关联表"""
    __tablename__ = "role_permissions"

    id = Column(Integer, primary_key=True, index=True)
    role = Column(Enum(UserRole), nullable=False)
    permission_id = Column(Integer, ForeignKey("permissions.id"), nullable=False)
    
    created_at = Column(DateTime(timezone=True), server_default=func.now())


class RefreshToken(Base):
    """刷新令牌"""
    __tablename__ = "refresh_tokens"

    id = Column(Integer, primary_key=True, index=True)
    user_id = Column(Integer, ForeignKey("users.id"), nullable=False)
    token = Column(String(500), unique=True, nullable=False)
    expires_at = Column(DateTime(timezone=True), nullable=False)
    ip_address = Column(String(50))
    user_agent = Column(String(500))
    
    revoked = Column(Boolean, default=False)
    revoked_at = Column(DateTime(timezone=True))
    
    created_at = Column(DateTime(timezone=True), server_default=func.now())
    
    # 关系
    user = relationship("User")