<?php

declare(strict_types=1);

namespace App\Http\Controllers\Api\V1;

use App\Http\Controllers\Controller;
use App\Http\Resources\RoleResource;
use App\Support\Permissions;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
use Spatie\Permission\Models\Role;

/**
 * Read-only view of the local authorisation model, so clients can render
 * permission-aware UI without hard-coding role names.
 */
class RoleController extends Controller
{
    public function index(): AnonymousResourceCollection
    {
        $this->authorize('viewAny', Role::class);

        $roles = Role::query()
            ->with('permissions')
            ->withCount('users')
            ->orderBy('name')
            ->get();

        return RoleResource::collection($roles);
    }

    public function show(Role $role): RoleResource
    {
        $this->authorize('view', $role);

        return RoleResource::make($role->load('permissions')->loadCount('users'));
    }

    /**
     * The full permission catalogue, grouped by resource — useful for building
     * a role editor outside the panel.
     */
    public function catalogue(): JsonResponse
    {
        $this->authorize('viewAny', Role::class);

        return response()->json(['data' => Permissions::grouped()]);
    }
}