<?php

namespace App\Http\Controllers\Web;

use App\Http\Controllers\Controller;
use App\Models\Appreciation;
use App\Models\User;
use App\Notifications\AppreciationReceivedNotification;
use App\Services\AuditService;
use App\Support\FormTextRules;
use Illuminate\Http\Request;

class AppreciationController extends Controller
{
    public function __construct(
        protected AuditService $audit
    ) {}

    public function index()
    {
        /** @var User $user */
        $user = auth()->user();
        $canManage = $this->canManageOperations($user);

        if (! $canManage) {
            return redirect()->to(route('my-hr-records.index') . '#appreciations');
        }

        $query = Appreciation::with(['user', 'givenByUser']);
        $kpis = [
            'total' => (clone $query)->count(),
        ];
        $appreciations = $query->orderByDesc('appreciation_date')->paginate(15);

        return view('appreciations.index', compact('appreciations', 'canManage', 'kpis'));
    }

    public function create()
    {
        abort_unless($this->canManageOperations(auth()->user()), 403);

        $users = User::forActiveDirectory();
        if (auth()->user()->company_id) {
            $users->where('company_id', auth()->user()->company_id);
        }
        $users = $users->orderBy('name')->get();

        return view('appreciations.create', compact('users'));
    }

    public function store(Request $request)
    {
        abort_unless($this->canManageOperations(auth()->user()), 403);

        $validated = $request->validate([
            'user_id' => 'required|exists:users,id',
            'title' => FormTextRules::notNumericOnly(true, 191),
            'description' => FormTextRules::notNumericOnly(false, 2000),
            'appreciation_date' => 'required|date|before_or_equal:today',
        ], FormTextRules::messages());
        $validated['given_by'] = auth()->id();
        $validated['company_id'] = auth()->user()->company_id;

        $appreciation = Appreciation::create($validated);
        $appreciation->load(['user', 'givenByUser']);

        if ($appreciation->user && (int) $appreciation->user_id !== (int) auth()->id()) {
            $appreciation->user->notify(new AppreciationReceivedNotification($appreciation));
        }

        $this->audit->log('appreciation.created', $appreciation);

        return redirect()->route('appreciations.index')->with('success', 'Appreciation recorded successfully.');
    }

    public function edit(Appreciation $appreciation)
    {
        abort_unless($this->canManageOperations(auth()->user()), 403);
        $this->assertTenantRecord($appreciation);
        $users = User::forActiveDirectory();
        if (auth()->user()->company_id) {
            $users->where('company_id', auth()->user()->company_id);
        }
        $users = $users->orderBy('name')->get();

        return view('appreciations.edit', compact('appreciation', 'users'));
    }

    public function update(Request $request, Appreciation $appreciation)
    {
        abort_unless($this->canManageOperations(auth()->user()), 403);
        $this->assertTenantRecord($appreciation);

        $validated = $request->validate([
            'user_id' => 'required|exists:users,id',
            'title' => FormTextRules::notNumericOnly(true, 191),
            'description' => FormTextRules::notNumericOnly(false, 2000),
            'appreciation_date' => 'required|date|before_or_equal:today',
        ], FormTextRules::messages());
        $validated['company_id'] = auth()->user()->company_id;
        $appreciation->update($validated);
        $this->audit->log('appreciation.updated', $appreciation);

        return redirect()->route('appreciations.index')->with('success', 'Appreciation updated successfully.');
    }

    public function destroy(Appreciation $appreciation)
    {
        abort_unless($this->canManageOperations(auth()->user()), 403);
        $this->assertTenantRecord($appreciation);
        $appreciation->delete();
        $this->audit->log('appreciation.deleted', null, ['appreciation_id' => $appreciation->id]);

        return redirect()->route('appreciations.index')->with('success', 'Appreciation deleted.');
    }

    protected function assertTenantRecord(Appreciation $appreciation): void
    {
        $companyId = auth()->user()?->company_id;
        if ($companyId && (int) $appreciation->company_id !== (int) $companyId) {
            abort(403);
        }
    }

    protected function canManageOperations(?User $user): bool
    {
        if (! $user) {
            return false;
        }

        if ($user->isCompanyAccountAdmin()) {
            return true;
        }

        return $user->hasPermission('hr_operations_view');
    }
}