from datetime import datetime
from flask_login import UserMixin
from werkzeug.security import generate_password_hash, check_password_hash
from app.extensions import db

role_permissions = db.Table(
    "role_permissions",
    db.Column("role_id", db.Integer, db.ForeignKey("roles.id"), primary_key=True),
    db.Column("permission_id", db.Integer, db.ForeignKey("permissions.id"), primary_key=True),
)


class Permission(db.Model):
    __tablename__ = "permissions"
    id = db.Column(db.Integer, primary_key=True)
    code = db.Column(db.String(80), unique=True, nullable=False)
    label = db.Column(db.String(120), nullable=False, default="")


class Role(db.Model):
    __tablename__ = "roles"
    id = db.Column(db.Integer, primary_key=True)
    code = db.Column(db.String(40), unique=True, nullable=False)
    name = db.Column(db.String(80), nullable=False)
    permissions = db.relationship("Permission", secondary=role_permissions, lazy="joined")

    def has(self, perm_code):
        return any(p.code == perm_code for p in self.permissions)


class User(UserMixin, db.Model):
    __tablename__ = "users"
    id = db.Column(db.Integer, primary_key=True)
    email = db.Column(db.String(160), unique=True, nullable=False, index=True)
    username = db.Column(db.String(60), unique=True, index=True)
    password_hash = db.Column(db.String(255))
    numeric_id = db.Column(db.Integer, unique=True, index=True)
    avatar = db.Column(db.String(255))
    bio = db.Column(db.String(500))
    steam_name = db.Column(db.String(60), default="")
    region = db.Column(db.String(12), default="global")
    lang = db.Column(db.String(8), default="en")
    email_verified = db.Column(db.Boolean, default=False)
    is_active_flag = db.Column("is_active", db.Boolean, default=True)
    intro_seen = db.Column(db.Boolean, default=False)
    theme = db.Column(db.String(10), default="dark")
    role_id = db.Column(db.Integer, db.ForeignKey("roles.id"))
    created_at = db.Column(db.DateTime, default=datetime.utcnow)
    last_login = db.Column(db.DateTime)
    reset_token = db.Column(db.String(100), nullable=True)
    reset_token_expiry = db.Column(db.DateTime, nullable=True)

    role = db.relationship("Role", lazy="joined")
    wallets = db.relationship("Wallet", backref="user", lazy="dynamic",
                              cascade="all,delete-orphan")
    game_profiles = db.relationship("GameProfile", backref="user", lazy="dynamic",
                                    cascade="all,delete-orphan")

    @property
    def is_active(self):
        return bool(self.is_active_flag)

    @property
    def is_admin(self):
        return bool(self.role and self.role.code in ("admin", "superadmin"))

    @property
    def is_tournament_manager(self):
        return bool(self.role and self.role.code == "tournament_manager")

    @property
    def is_operator(self):
        return bool(self.is_admin or self.is_tournament_manager)

    def has_permission(self, code):
        if self.role and self.role.code == "superadmin":
            return True
        return bool(self.role and self.role.has(code))

    def set_password(self, raw):
        self.password_hash = generate_password_hash(raw)

    def check_password(self, raw):
        return bool(self.password_hash) and check_password_hash(self.password_hash, raw)

    @property
    def display_name(self):
        return self.username or (self.email.split("@")[0] if self.email else "Player")


class GameProfile(db.Model):
    __tablename__ = "game_profiles"
    id = db.Column(db.Integer, primary_key=True)
    user_id = db.Column(db.Integer, db.ForeignKey("users.id"), nullable=False)
    game_id = db.Column(db.Integer, db.ForeignKey("games.id"), nullable=False)
    in_game_name = db.Column(db.String(60))
    in_game_id = db.Column(db.String(60))
    __table_args__ = (db.UniqueConstraint("user_id", "game_id", name="uq_game_profile"),)