<?php

declare(strict_types=1);

namespace App\Http\Controllers\Api\V1;

use App\Http\Controllers\Controller;
use App\Http\Resources\SettingResource;
use App\Models\Setting;
use App\Support\ContentVersion;
use App\Support\Maintenance;
use Illuminate\Http\Request;
use Illuminate\Http\Resources\Json\AnonymousResourceCollection;

/**
 * Runtime settings, as the panel's settings screen shows them: the ones that
 * exist, each value as the JSON it is. None is created or deleted from here.
 */
class SettingController extends Controller
{
    /**
     * Written by the application, never by hand: a hand-set content version
     * would leave the frontend's cache serving stale pages or refetching them
     * for nothing.
     */
    protected const READ_ONLY = [ContentVersion::KEY];

    public function index(Request $request): AnonymousResourceCollection
    {
        $this->authorize('settings.view');

        return SettingResource::collection(Setting::query()->orderBy('key')->get());
    }

    public function show(Setting $setting): SettingResource
    {
        $this->authorize('settings.view');

        return SettingResource::make($setting);
    }

    public function update(Request $request, Setting $setting): SettingResource
    {
        // Taking the site down is its own permission, in the panel as here.
        $this->authorize($setting->key === Maintenance::KEY ? 'settings.maintenance' : 'settings.update');

        abort_if(in_array($setting->key, self::READ_ONLY, true), 403, __('rules.settings.read_only'));

        // `present` rather than `required`: null is a value a setting may hold.
        $request->validate(['value' => ['present']]);

        $setting->update(['value' => $request->input('value')]);

        return SettingResource::make($setting);
    }
}