"""add api endpoint permissions and registry

Revision ID: 20260513_02
Revises: 20260513_01
Create Date: 2026-05-13 10:00:00.000000

"""

from typing import Sequence, Union

from alembic import op
import sqlalchemy as sa
from sqlalchemy.dialects import postgresql


revision: str = "20260513_02"
down_revision: Union[str, None] = "20260513_01"
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None


def _table_exists(inspector: sa.Inspector, table_name: str) -> bool:
    return table_name in inspector.get_table_names()


def upgrade() -> None:
    bind = op.get_bind()
    inspector = sa.inspect(bind)

    # Create api_endpoint_registries table
    if not _table_exists(inspector, "api_endpoint_registries"):
        op.create_table(
            "api_endpoint_registries",
            sa.Column("id", postgresql.UUID(as_uuid=True), nullable=False),
            sa.Column("endpoint_key", sa.String(length=100), nullable=False),
            sa.Column("method", sa.String(length=10), nullable=False),
            sa.Column("path", sa.String(length=200), nullable=False),
            sa.Column("module", sa.String(length=80), nullable=False),
            sa.Column("action", sa.String(length=20), nullable=False),
            sa.Column("description", sa.String(length=500), nullable=True),
            sa.Column("default_roles", sa.String(length=200), nullable=False),
            sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
            sa.PrimaryKeyConstraint("id"),
            sa.UniqueConstraint("endpoint_key", name="uq_api_endpoint_registry_key"),
        )
        op.create_index("ix_api_endpoint_registries_endpoint_key", "api_endpoint_registries", ["endpoint_key"])

    # Create api_endpoint_permissions table
    if not _table_exists(inspector, "api_endpoint_permissions"):
        op.create_table(
            "api_endpoint_permissions",
            sa.Column("id", postgresql.UUID(as_uuid=True), nullable=False),
            sa.Column("study_id", postgresql.UUID(as_uuid=True), nullable=False),
            sa.Column("role", sa.String(length=20), nullable=False),
            sa.Column("endpoint_key", sa.String(length=100), nullable=False),
            sa.Column("allowed", sa.Boolean(), server_default="false", nullable=False),
            sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
            sa.ForeignKeyConstraint(["study_id"], ["studies.id"]),
            sa.PrimaryKeyConstraint("id"),
            sa.UniqueConstraint("study_id", "role", "endpoint_key", name="uq_api_endpoint_perm"),
        )
        op.create_index("ix_api_endpoint_permissions_study_id", "api_endpoint_permissions", ["study_id"])
        op.create_index("ix_api_endpoint_permissions_role", "api_endpoint_permissions", ["role"])
        op.create_index("ix_api_endpoint_permissions_endpoint_key", "api_endpoint_permissions", ["endpoint_key"])


def downgrade() -> None:
    bind = op.get_bind()
    inspector = sa.inspect(bind)

    # Drop api_endpoint_permissions table
    if _table_exists(inspector, "api_endpoint_permissions"):
        op.drop_index("ix_api_endpoint_permissions_endpoint_key", table_name="api_endpoint_permissions")
        op.drop_index("ix_api_endpoint_permissions_role", table_name="api_endpoint_permissions")
        op.drop_index("ix_api_endpoint_permissions_study_id", table_name="api_endpoint_permissions")
        op.drop_table("api_endpoint_permissions")

    # Drop api_endpoint_registries table
    if _table_exists(inspector, "api_endpoint_registries"):
        op.drop_index("ix_api_endpoint_registries_endpoint_key", table_name="api_endpoint_registries")
        op.drop_table("api_endpoint_registries")