<?php

namespace App\Providers;

use App\Actions\Permissions\PermissionService;
use App\Enums\Permission;
use App\Models\Project;
use App\Models\Team;
use App\Models\User;
use Carbon\CarbonImmutable;
use Illuminate\Database\Eloquent\Relations\Relation;
use Illuminate\Support\Facades\Date;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Gate;
use Illuminate\Support\Facades\URL;
use Illuminate\Support\ServiceProvider;
use Illuminate\Validation\Rules\Password;

class AppServiceProvider extends ServiceProvider
{
    /**
     * Register any application services.
     */
    public function register(): void
    {
        //
    }

    /**
     * Bootstrap any application services.
     */
    public function boot(): void
    {

        if ($this->app->environment() !== 'local') {
            URL::forceScheme('https');
        }

        $this->configureAuthorization();
        $this->configureDefaults();
    }

    /**
     * Configure authorization behaviors.
     */
    protected function configureAuthorization(): void
    {
        Relation::enforceMorphMap([
            'project' => Project::class,
            'team' => Team::class,
            'user' => User::class,
        ]);

        /** @var PermissionService $permissionService */
        $permissionService = $this->app->make(PermissionService::class);

        Gate::define('access-admin', fn (User $user): bool => $permissionService->allows($user, Permission::GlobalAdmin));
        Gate::define('create-project', fn (User $user): bool => $permissionService->allows($user, Permission::ProjectCreate));
        Gate::define('manage-teams', fn (User $user): bool => $permissionService->canManageAnyTeam($user));
    }

    /**
     * Configure default behaviors for production-ready applications.
     */
    protected function configureDefaults(): void
    {
        Date::use(CarbonImmutable::class);

        DB::prohibitDestructiveCommands(
            app()->isProduction(),
        );

        Password::defaults(fn (): ?Password => app()->isProduction()
            ? Password::min(12)
                ->mixedCase()
                ->letters()
                ->numbers()
                ->symbols()
                ->uncompromised()
            : null,
        );
    }
}