<?php

declare(strict_types=1);

namespace App\Support\References\Resolvers;

use App\Filament\Resources\BackupSetResource;
use App\Models\BackupSet;
use App\Models\Tenant;
use App\Models\User;
use App\Services\Auth\CapabilityResolver;
use App\Support\Auth\Capabilities;
use App\Support\References\ReferenceClass;
use App\Support\References\ReferenceDescriptor;
use App\Support\References\ReferenceLinkTarget;
use App\Support\References\ResolvedReference;

final class BackupSetReferenceResolver extends BaseReferenceResolver
{
    public function __construct(
        \App\Support\References\ReferenceTypeLabelCatalog $typeLabels,
        private readonly CapabilityResolver $capabilityResolver,
    ) {
        parent::__construct($typeLabels);
    }

    public function referenceClass(): ReferenceClass
    {
        return ReferenceClass::BackupSet;
    }

    public function resolve(ReferenceDescriptor $descriptor): ResolvedReference
    {
        $backupSetId = $this->linkedModelId($descriptor);
        $tenantId = $descriptor->tenantId;

        if ($backupSetId === null || $tenantId === null || $tenantId <= 0) {
            return $this->unresolved($descriptor);
        }

        $backupSet = BackupSet::query()
            ->with('tenant')
            ->whereKey($backupSetId)
            ->where('tenant_id', $tenantId)
            ->first();

        if (! $backupSet instanceof BackupSet) {
            return $this->missing($descriptor);
        }

        if (! $this->canOpenTenantRecord($backupSet->tenant, Capabilities::TENANT_VIEW)) {
            return $this->inaccessible($descriptor);
        }

        return $this->resolved(
            descriptor: $descriptor,
            primaryLabel: (string) $backupSet->name,
            secondaryLabel: 'Backup set #'.$backupSet->getKey(),
            linkTarget: new ReferenceLinkTarget(
                targetKind: ReferenceClass::BackupSet->value,
                url: BackupSetResource::getUrl('view', ['record' => $backupSet], tenant: $backupSet->tenant),
                actionLabel: 'View backup set',
                contextBadge: 'Tenant',
            ),
        );
    }

    private function canOpenTenantRecord(?Tenant $tenant, string $capability): bool
    {
        $user = auth()->user();

        return $tenant instanceof Tenant
            && $user instanceof User
            && $this->capabilityResolver->isMember($user, $tenant)
            && $this->capabilityResolver->can($user, $tenant, $capability);
    }
}