<?php

namespace App\Providers\Filament;

use Boquizo\FilamentLogViewer\FilamentLogViewerPlugin;
use Filament\Http\Middleware\Authenticate;
use Filament\Http\Middleware\AuthenticateSession;
use Filament\Http\Middleware\DisableBladeIconComponents;
use Filament\Http\Middleware\DispatchServingFilamentEvent;
use Filament\Navigation\NavigationGroup;
use Filament\Pages\Dashboard;
use Filament\Panel;
use Filament\PanelProvider;
use Filament\Support\Colors\Color;
use Filament\Support\Icons\Heroicon;
use Filament\Widgets\AccountWidget;
use Filament\Widgets\FilamentInfoWidget;
use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
use Illuminate\Cookie\Middleware\EncryptCookies;
use Illuminate\Foundation\Http\Middleware\PreventRequestForgery;
use Illuminate\Routing\Middleware\SubstituteBindings;
use Illuminate\Session\Middleware\StartSession;
use Illuminate\View\Middleware\ShareErrorsFromSession;
use Modules\Booking\BookingPlugin;
use Modules\Catalog\CatalogPlugin;
use Modules\Identity\IdentityPlugin;
use Modules\Payment\PaymentPlugin;
use Modules\Routing\RoutingPlugin;

class AdminPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
            ->default()
            ->id('admin')
            ->path('admin')
            ->viteTheme('resources/css/filament/admin/theme.css')
            ->login()
            ->colors([
                'primary' => Color::Amber,
            ])
            ->navigationGroups([
                NavigationGroup::make()->label('Access'),
                NavigationGroup::make()->label('Catalog'),
                NavigationGroup::make()->label('Routing'),
                NavigationGroup::make()->label('Operations'),
            ])
            ->plugins([
                CatalogPlugin::make(),
                RoutingPlugin::make(),
                BookingPlugin::make(),
                PaymentPlugin::make(),
                IdentityPlugin::make(),
                // T6.5 — ops convenience for browsing storage/logs/*.log
                // in-browser; distinct from the structured, per-model audit
                // trail (AuditLogResource, T6.2). No extra permission gate:
                // the panel login itself already restricts to admin-tier
                // roles (domain.md §8).
                FilamentLogViewerPlugin::make()
                    ->navigationGroup('Operations')
                    ->navigationIcon(Heroicon::OutlinedDocumentText)
                    ->navigationLabel('Log Viewer'),
            ])
            ->discoverResources(in: app_path('Filament/Resources'), for: 'App\Filament\Resources')
            ->discoverPages(in: app_path('Filament/Pages'), for: 'App\Filament\Pages')
            ->pages([
                Dashboard::class,
            ])
            ->discoverWidgets(in: app_path('Filament/Widgets'), for: 'App\Filament\Widgets')
            ->widgets([
                AccountWidget::class,
                FilamentInfoWidget::class,
            ])
            ->middleware([
                EncryptCookies::class,
                AddQueuedCookiesToResponse::class,
                StartSession::class,
                AuthenticateSession::class,
                ShareErrorsFromSession::class,
                PreventRequestForgery::class,
                SubstituteBindings::class,
                DisableBladeIconComponents::class,
                DispatchServingFilamentEvent::class,
            ])
            ->authMiddleware([
                Authenticate::class,
            ]);
    }
}