<?php

declare(strict_types=1);

namespace App\Models\Scopes;

use Illuminate\Database\Eloquent\Builder;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Scope;

/**
 * Global scope that filters event-related models by organisation_id.
 *
 * Resolves the organisation from (in order):
 * 1. An explicitly provided organisation ID (constructor)
 * 2. The route parameter 'organisation'
 *
 * IMPORTANT: This scope is route-dependent — it only works when the
 * 'organisation' parameter is present in the URL (e.g. /organisations/{organisation}/events).
 * Routes without an organisation segment (e.g. GET /events/{event}) will NOT be scoped,
 * silently bypassing multi-tenancy. All new routes that touch organisation-owned
 * data MUST be nested under /organisations/{organisation}/... to guarantee scoping.
 */
final class OrganisationScope implements Scope
{
    public function __construct(
        private readonly ?string $organisationId = null,
    ) {}

    public function apply(Builder $builder, Model $model): void
    {
        $id = $this->organisationId
            ?? request()->route('organisation')?->id
            ?? (is_string(request()->route('organisation')) ? request()->route('organisation') : null);

        if ($id) {
            $builder->where($model->getTable() . '.organisation_id', $id);
        }
    }
}