<?php

namespace Modules\Identity\Filament\Resources\Customers;

use App\Models\User;
use BackedEnum;
use Filament\Resources\Resource;
use Filament\Schemas\Schema;
use Filament\Support\Icons\Heroicon;
use Filament\Tables\Table;
use Illuminate\Database\Eloquent\Builder;
use Modules\Identity\Filament\Resources\Customers\Pages\ListCustomers;
use Modules\Identity\Filament\Resources\Customers\Pages\ViewCustomer;
use Modules\Identity\Filament\Resources\Customers\Schemas\CustomerInfolist;
use Modules\Identity\Filament\Resources\Customers\Tables\CustomersTable;
use UnitEnum;

/**
 * Customers are `users` rows carrying no role at all — the inverse scope of
 * StaffResource (domain.md §4, single `users` table). Read-only by design:
 * customer accounts are created via the mini app/mobile token flow (T1.2),
 * never hand-entered by staff.
 */
class CustomerResource extends Resource
{
    protected static ?string $model = User::class;

    protected static string|BackedEnum|null $navigationIcon = Heroicon::OutlinedUsers;

    protected static string|UnitEnum|null $navigationGroup = 'Access';

    protected static ?string $navigationLabel = 'Customers';

    protected static ?string $modelLabel = 'Customer';

    public static function getEloquentQuery(): Builder
    {
        return parent::getEloquentQuery()->doesntHave('roles');
    }

    public static function table(Table $table): Table
    {
        return CustomersTable::configure($table);
    }

    public static function infolist(Schema $schema): Schema
    {
        return CustomerInfolist::configure($schema);
    }

    public static function getPages(): array
    {
        return [
            'index' => ListCustomers::route('/'),
            'view' => ViewCustomer::route('/{record}'),
        ];
    }

    public static function canViewAny(): bool
    {
        return auth()->user()?->can('view_customers') ?? false;
    }
}