<?php

declare(strict_types=1);

namespace App\Services\FormBuilder;

use App\Exceptions\FormBuilder\SchemaNotFoundException;
use App\Exceptions\FormBuilder\TokenExpiredException;
use App\Models\FormBuilder\FormSchema;
use App\Models\Scopes\OrganisationScope;

/**
 * Token-to-schema resolution for every /public/forms/* endpoint.
 * Centralises the 7-day grace window logic (ARCH §10, BACKLOG FORM-04
 * tracks making this configurable).
 *
 * Throws the standardised public-form exceptions directly so callers
 * don't need to branch on grace state themselves.
 *
 * Org scope is explicitly bypassed here: public_token is globally unique
 * across the platform, and the public routes have no `{organisation}`
 * route parameter to drive OrganisationScope. Relying on the scope to
 * no-op silently works today but is accidentally-correct — any future
 * middleware that sets an org context (impersonation, platform admin
 * visibility toggle, etc.) would start filtering public resolutions.
 */
final class PublicFormTokenResolver
{
    private const GRACE_DAYS = 7;

    public function resolve(string $token): FormSchema
    {
        $current = FormSchema::query()
            ->withoutGlobalScope(OrganisationScope::class)
            ->where('public_token', $token)
            ->first();
        if ($current !== null) {
            return $current;
        }

        $previous = FormSchema::query()
            ->withoutGlobalScope(OrganisationScope::class)
            ->where('public_token_previous', $token)
            ->first();

        if ($previous === null) {
            throw new SchemaNotFoundException;
        }

        $rotatedAt = $previous->public_token_rotated_at;
        if ($rotatedAt === null) {
            return $previous;
        }

        if ($rotatedAt->addDays(self::GRACE_DAYS)->isPast()) {
            throw new TokenExpiredException;
        }

        return $previous;
    }
}