<?php

namespace App\Filament\Resources\TenantResource\Pages;

use App\Filament\Resources\TenantResource;
use App\Models\Tenant;
use App\Models\User;
use App\Services\Audit\WorkspaceAuditLogger;
use App\Support\Audit\AuditActionId;
use App\Support\Auth\Capabilities;
use App\Support\Rbac\UiEnforcement;
use Filament\Actions;
use Filament\Actions\Action;
use Filament\Notifications\Notification;
use Filament\Resources\Pages\EditRecord;

class EditTenant extends EditRecord
{
    protected static string $resource = TenantResource::class;

    protected function getHeaderActions(): array
    {
        return [
            Actions\ViewAction::make(),
            UiEnforcement::forAction(
                Action::make('archive')
                    ->label('Archive')
                    ->color('danger')
                    ->requiresConfirmation()
                    ->visible(fn (Tenant $record): bool => ! $record->trashed())
                    ->action(function (Tenant $record, WorkspaceAuditLogger $auditLogger): void {
                        $user = auth()->user();

                        if (! $user instanceof User) {
                            abort(403);
                        }

                        $record->delete();

                        $auditLogger->logTenantLifecycleAction(
                            tenant: $record,
                            action: AuditActionId::TenantArchived,
                            actor: $user,
                            context: [
                                'metadata' => [
                                    'internal_tenant_id' => (int) $record->getKey(),
                                    'tenant_guid' => (string) $record->tenant_id,
                                ],
                            ],
                        );

                        Notification::make()
                            ->title('Tenant archived')
                            ->body('The tenant remains viewable in management and audit flows, but it is no longer selectable as active context.')
                            ->success()
                            ->send();
                    })
            )
                ->requireCapability(Capabilities::TENANT_DELETE)
                ->tooltip('You do not have permission to archive tenants.')
                ->preserveVisibility()
                ->destructive()
                ->apply(),
        ];
    }
}