<?php

namespace App\Http\Controllers\Web;

use App\Http\Controllers\Controller;
use App\Models\Account;
use App\Models\Expense;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class ExpenseController extends Controller
{
    public function index(Request $request)
    {
        $query = Expense::with('account');
        if ($request->filled('status')) {
            $query->where('status', $request->status);
        }
        $expenses = $query->orderByDesc('date')->paginate(15)->withQueryString();

        return view('finance.expenses', compact('expenses'));
    }

    public function create()
    {
        $accounts = Account::orderBy('name')->get();

        return view('finance.expenses-create', compact('accounts'));
    }

    public function store(Request $request)
    {
        $validated = $request->validate([
            'account_id' => 'nullable|exists:accounts,id',
            'category' => 'required|string|max:191',
            'amount' => 'required|numeric|min:0',
            'date' => 'required|date',
            'description' => 'nullable|string|max:1000',
            'status' => 'nullable|in:pending,approved,rejected,paid',
        ]);
        $validated['status'] = $validated['status'] ?? 'pending';
        $validated['company_id'] = Auth::user()?->company_id;
        Expense::create($validated);

        return redirect()->route('expenses.index')->with('success', 'Expense created successfully.');
    }

    public function edit(Expense $expense)
    {
        $this->authorizeExpense($expense);
        $accounts = Account::orderBy('name')->get();

        return view('finance.expenses-edit', compact('expense', 'accounts'));
    }

    public function update(Request $request, Expense $expense)
    {
        $this->authorizeExpense($expense);
        $validated = $request->validate([
            'account_id' => 'nullable|exists:accounts,id',
            'category' => 'required|string|max:191',
            'amount' => 'required|numeric|min:0',
            'date' => 'required|date',
            'description' => 'nullable|string|max:1000',
            'status' => 'required|in:pending,approved,rejected,paid',
        ]);
        $expense->update($validated);

        return redirect()->route('expenses.index')->with('success', 'Expense updated successfully.');
    }

    public function destroy(Expense $expense)
    {
        $this->authorizeExpense($expense);
        $expense->delete();

        return redirect()->route('expenses.index')->with('success', 'Expense deleted successfully.');
    }

    protected function authorizeExpense(Expense $expense): void
    {
        $companyId = Auth::user()?->company_id;
        if ($companyId && $expense->company_id !== $companyId) {
            abort(403);
        }
    }
}