<?php

namespace Modules\Platform\User\Entities;

use Cog\Contracts\Ownership\CanBeOwner;
use Torzer\Awesome\Landlord\BelongsToTenants;
use Illuminate\Database\Eloquent\SoftDeletes;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Modules\Platform\Companies\Entities\Company;
use Modules\Platform\Core\Traits\CanComment;
use Modules\Platform\Settings\Entities\Language;
use Spatie\Activitylog\Traits\CausesActivity;
use Spatie\Permission\Traits\HasRoles;
use Spatie\Permission\Models\Permission;
use Tymon\JWTAuth\Contracts\JWTSubject;

/**
 * Class User
 *
 * @package Modules\Platform\User\Entities
 * @property int $id
 * @property string $email
 * @property string $password
 * @property string|null $remember_token
 * @property \Illuminate\Support\Carbon|null $created_at
 * @property \Illuminate\Support\Carbon|null $updated_at
 * @property string|null $deleted_at
 * @property int $is_active
 * @property string|null $first_name
 * @property string|null $last_name
 * @property string|null $title
 * @property string|null $department
 * @property string|null $office_phone
 * @property string|null $mobile_phone
 * @property string|null $home_phone
 * @property string|null $signature
 * @property string|null $fax
 * @property string|null $secondary_email
 * @property int $left_panel_hide
 * @property string|null $theme
 * @property string|null $address_country
 * @property string|null $address_state
 * @property string|null $address_city
 * @property string|null $address_postal_code
 * @property string|null $address_street
 * @property int|null $time_format_id
 * @property int|null $date_format_id
 * @property string|null $time_zone
 * @property string|null $profile_pic_conf
 * @property string|null $profile_image_path
 * @property int|null $language_id
 * @property int $access_to_all_entity
 * @property string $name
 * @property int|null $company_id
 * @property-read \Illuminate\Database\Eloquent\Collection|\Spatie\Activitylog\Models\Activity[] $activity
 * @property-read \Illuminate\Database\Eloquent\Collection|\Modules\Platform\Core\Entities\Comment[] $comments
 * @property-read \Modules\Platform\Companies\Entities\Company|null $company
 * @property-read \Modules\Platform\User\Entities\DateFormat|null $dateFormat
 * @property-read \Illuminate\Database\Eloquent\Collection|\Modules\Platform\User\Entities\Group[] $groups
 * @property-read \Modules\Platform\Settings\Entities\Language|null $language
 * @property-read \Illuminate\Notifications\DatabaseNotificationCollection|\Illuminate\Notifications\DatabaseNotification[] $notifications
 * @property-read \Illuminate\Database\Eloquent\Collection|\Spatie\Permission\Models\Permission[] $permissions
 * @property-read \Illuminate\Database\Eloquent\Collection|\Spatie\Permission\Models\Role[] $roles
 * @property-read \Modules\Platform\User\Entities\TimeFormat|null $timeFormat
 * @method static bool|null forceDelete()
 * @method static \Illuminate\Database\Query\Builder|\Modules\Platform\User\Entities\User onlyTrashed()
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User permission($permissions)
 * @method static bool|null restore()
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User role($roles)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereAccessToAllEntity($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereAddressCity($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereAddressCountry($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereAddressPostalCode($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereAddressState($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereAddressStreet($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereCompanyId($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereCreatedAt($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereDateFormatId($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereDeletedAt($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereDepartment($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereEmail($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereFax($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereFirstName($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereHomePhone($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereId($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereIsActive($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereLanguageId($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereLastName($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereLeftPanelHide($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereMobilePhone($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereName($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereOfficePhone($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User wherePassword($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereProfileImagePath($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereProfilePicConf($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereRememberToken($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereSecondaryEmail($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereSignature($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereTheme($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereTimeFormatId($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereTimeZone($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereTitle($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereUpdatedAt($value)
 * @method static \Illuminate\Database\Query\Builder|\Modules\Platform\User\Entities\User withTrashed()
 * @method static \Illuminate\Database\Query\Builder|\Modules\Platform\User\Entities\User withoutTrashed()
 * @mixin \Eloquent
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User newModelQuery()
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User newQuery()
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User query()
 * @property string|null $provider
 * @property string|null $provider_id
 * @property-read \Illuminate\Database\Eloquent\Collection|\Spatie\Activitylog\Models\Activity[] $loggedActivity
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereProvider($value)
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereProviderId($value)
 * @property string|null $api_key
 * @method static \Illuminate\Database\Eloquent\Builder|\Modules\Platform\User\Entities\User whereApiKey($value)
 * @property-read int|null $activity_count
 * @property-read int|null $comments_count
 * @property-read int|null $groups_count
 * @property-read int|null $logged_activity_count
 * @property-read int|null $notifications_count
 * @property-read int|null $permissions_count
 * @property-read int|null $roles_count
 * @property-read \Illuminate\Database\Eloquent\Collection|\Spatie\Activitylog\Models\Activity[] $actions
 * @property-read int|null $actions_count
 */
class User extends Authenticatable implements CanBeOwner, JWTSubject
{
    use Notifiable, HasRoles, SoftDeletes, CausesActivity, CanComment, BelongsToTenants;

    const ADMIN_ROLE_NAME = 'admin';

    public static function boot()
    {
        parent::boot();

        // static::saving(function (User $user) {
        //     $fullName = $user->first_name . ' ' . $user->last_name;
        //     $user->name = $fullName;


        //     //Reset cache
        // });
    }


    /**
     * The attributes that are mass assignable.
     *
     * @var array
     */
    protected $fillable = [
        'id',
        'name',
        'email',
        'password',
        'jwt_token',
        'is_active',
        'last_name',
        'first_name',
        'full_name',
        'code',
        'title',
        'department',
        'office_phone',
        'office_phone',
        'mobile_phone',
        'show_cid',
        'dnd_enabled',
        'home_phone',
        'fax',
        'secondary_email',
        'left_panel_hide',
        'theme',
        'address_country',
        'address_state',
        'address_city',
        'address_postal_code',
        'address_street',
        'signature',
        'time_zone',
        'date_format_id',
        'time_format_id',
        'profile_pic_conf',
        'profile_image_path',
        'name',
        'language_id',
        'password',
        'access_to_all_entity',
        'company_id',
        'api_key',
        'fcm_token',
        'jwt_token',
        'hide_from_reports',
        'allow_download_recording',
    ];


    /**
     * The attributes that should be hidden for arrays.
     *
     * @var array
     */
    protected $hidden = [
        'password',
        'remember_token',
        'deleted_at'
    ];


    protected $dates = [
        'created_at',
        'updated_at'
    ];

    protected $casts = [
        'hide_from_reports' => 'boolean',
        'show_cid' => 'boolean',
        'dnd_enabled' => 'boolean',
    ];

    /**
     * Scope that excludes users hidden from reports.
     * Company managers can see all users; other roles only see non-hidden users,
     * but the currently authenticated user always sees themselves.
     */
    public function scopeVisibleInReports($query)
    {
        $currentUser = \Auth::user();
        if ($currentUser && $currentUser->hasRole('company_manager')) {
            return $query;
        }
        $currentUserId = $currentUser ? $currentUser->id : null;
        return $query->where(function ($q) use ($currentUserId) {
            $q->where('hide_from_reports', 0);
            if ($currentUserId) {
                $q->orWhere('id', $currentUserId);
            }
        });
    }

    public function dateFormat()
    {
        return $this->belongsTo(DateFormat::class);
    }

    public function isAdmin()
    {
        return $this->hasPermissionTo('settings.access');
    }

    /**
     * Whether this user is a company-level admin: they hold the
     * "Admin Setting" permission (admin.settings) or the "Company Admin" role
     * (company_manager).
     *
     * @return bool
     */
    public function isCompanyAdmin()
    {
        return $this->hasPermissionTo('admin.settings')
            || $this->hasRole(Role::DEFAULT_COMPANY_ADMIN_ROLE);
    }

    /**
     * Whether this user may manage every user, role, group and permission of
     * their company, including the protected Admin / Company Admin entities.
     *
     * True for super admins (settings.access) and for company admins
     * (Admin Setting permission or Company Admin role).
     *
     * @return bool
     */
    public function canManageCompanyAccess()
    {
        return $this->isAdmin() || $this->isCompanyAdmin();
    }

    /**
     * Whether this user may view/manage the given user.
     *
     * Super admins (settings.access) may manage anyone. Company admins
     * (Admin Setting permission or Company Admin role) may manage any user of
     * their own company, including users holding a protected role. Everyone
     * else keeps the previous restriction: same company only and never a
     * protected-role user.
     *
     * @param User $target
     * @return bool
     */
    public function canManageUser(User $target)
    {
        if ($this->isAdmin()) {
            return true;
        }

        if ($target->company_id != $this->company_id) {
            return false;
        }

        if (!$this->isCompanyAdmin() && $target->hasProtectedRole()) {
            return false;
        }

        return true;
    }

    /**
     * Whether this user holds a protected role (Admin / Company Admin).
     *
     * Protected users cannot be seen or managed by scoped "user.settings"
     * users that lack full settings access.
     *
     * @return bool
     */
    public function hasProtectedRole()
    {
        return $this->roles()
            ->whereIn('name', Role::protectedRoleNames())
            ->exists();
    }

    /**
     * Exclude users that hold a protected role from the query.
     *
     * @param \Illuminate\Database\Eloquent\Builder $query
     * @return \Illuminate\Database\Eloquent\Builder
     */
    public function scopeExcludingProtectedRoles($query)
    {
        return $query->whereDoesntHave('roles', function ($q) {
            $q->whereIn('name', Role::protectedRoleNames());
        });
    }

    /**
     * Verify if user can access company
     * @param Company $company
     * @return bool
     */
    public function canAccessCompany(Company $company = null)
    {

        if (empty($company)) {
            $company = \Auth::user()->companyContext();
        }

        if ($this->isAdmin() || $company->id == $this->company->id) {
            return true;
        }
        return false;
    }

    public function timeFormat()
    {
        return $this->belongsTo(TimeFormat::class);
    }

    public function language()
    {
        return $this->belongsTo(Language::class);
    }

    public function groups()
    {
        return $this->belongsToMany(Group::class)->withTimestamps();
    }

    /**
     * The group (queue) ids this user can access to in call reports.
     *
     * Users with access to all entities see every company queue;
     * anyone else only sees queues they were granted the matching queue
     * permission for (permission name: {queue_id}.{queue_name}).
     *
     * @return array
     */
    public function accessibleQueueIds()
    {
        $companyId = $this->company_id ?? 1;

        if ((string) $this->access_to_all_entity === '1') {
            return Group::where('company_id', $companyId)->pluck('id')->map(function ($id) {
                return (int) $id;
            })->all();
        }

        $grantedQueuePermissions = Permission::where('perm_group', 'groups')
            ->where('guard_name', 'web')
            ->get(['id', 'name'])
            ->filter(function ($permission) {
                return $this->hasPermissionTo($permission->name);
            })
            ->pluck('name')
            ->map(function ($name) {
                return strtolower((string) $name);
            })
            ->all();

        return Group::where('company_id', $companyId)
            ->get(['id', 'name'])
            ->filter(function (Group $group) use ($grantedQueuePermissions) {
                return in_array(
                    strtolower($group->id . '.' . strtolower($group->name)),
                    $grantedQueuePermissions,
                    true
                );
            })
            ->pluck('id')
            ->map(function ($id) {
                return (int) $id;
            })
            ->values()
            ->all();
    }

    public function theme()
    {
        return $this->theme;
    }

    public function company()
    {
        return $this->belongsTo(Company::class);
    }

    public function getJWTIdentifier()
    {
        return $this->getKey();
    }

    public function getJWTCustomClaims()
    {
        return [];
    }

    /**
     * All SIP/PJSIP/WSS extensions belonging to this user.
     */
    public function extensions()
    {
        return $this->hasMany(\Modules\Platform\User\Entities\UserExtension::class, 'user_id');
    }

    public function companyContext()
    {

        return session()->get('currentCompany');

    }


}