<?php
/**
 * Build AccessScope from a WordPress user and agent directory.
 *
 * @package Bookline
 */

declare( strict_types=1 );

namespace Bookline\Application\Auth;

use Bookline\Domain\Agent\AgentRepository;

/**
 * Managers with bookline_manage_settings (or admins) get global scope;
 * bookline_agent users are scoped to their linked agent row.
 *
 * @since 0.1.0
 */
final class AccessScopeFactory {

	/**
	 * Constructor.
	 *
	 * @param AgentRepository $agents Agent port.
	 */
	public function __construct(
		private readonly AgentRepository $agents,
	) {}

	/**
	 * Derive scope for a WordPress user id.
	 *
	 * @param int                   $wp_user_id WordPress user id.
	 * @param callable(string):bool $can        Capability checker.
	 *
	 * @since 0.1.0
	 */
	public function for_user( int $wp_user_id, callable $can ): AccessScope {
		if ( $can( 'bookline_manage_settings' ) || $can( 'manage_options' ) ) {
			return AccessScope::global();
		}

		// Managers who can manage all bookings but not settings still see globally.
		if ( $can( 'bookline_manage_bookings' ) && $can( 'bookline_manage_agents' ) ) {
			return AccessScope::global();
		}

		$agent = $this->agents->find_by_wp_user_id( $wp_user_id );
		if ( null !== $agent && null !== $agent->id() ) {
			return AccessScope::for_agents( (int) $agent->id() );
		}

		// Capability without a linked agent: empty agent scope (sees nothing).
		return AccessScope::for_agents();
	}
}