<?php

namespace Modules\Api\Http\Controllers;

use App\Http\Controllers\Controller;
use Modules\Api\Service\CompanyDataSettingsService;
use Modules\Api\Traits\CompanyTrait;
use Modules\Api\Traits\RespondTrait;

/**
 * CompanyDataSettingsApiController
 *
 * GET /api/settings/company-data
 *
 * Read-only endpoint for the mobile app. Returns the exact same company data
 * configuration shown on the web "Company Data Settings" page, resolved with
 * the same CompanySettings keys, normalizers and defaults as the web
 * controller. Each setting is returned as {key, value} plus {options} for
 * settings that have selectable choices.
 *
 * The same payload is included in the /api/login response (see
 * ApiAuthController::login).
 */
class CompanyDataSettingsApiController extends Controller
{
    use RespondTrait, CompanyTrait;

    /**
     * Return the company data settings as a flat list of key/value pairs.
     *
     * @return \Illuminate\Http\JsonResponse
     */
    public function index()
    {
        $this->checkCompanyContext();

        if (!\Auth::user()->hasPermissionTo('admin.settings')) {
            return $this->respond(false, [], [], ['message' => 'Unauthorized'], 403);
        }

        $company = \Auth::user()->companyContext();
        $companyId = $company ? $company->id : \Auth::user()->company_id;

        $settings = app(CompanyDataSettingsService::class)->getSettings($companyId);

        return $this->respond(true, [
            'settings' => $settings,
        ], [], ['message' => 'company data settings fetched successfully']);
    }
}