<?php

declare(strict_types=1);

namespace App\Filament\Resources\Users\Pages;

use App\Filament\Resources\Users\UserResource;
use App\Models\User;
use Filament\Resources\Pages\CreateRecord;
use Illuminate\Database\Eloquent\Model;

class CreateUser extends CreateRecord
{
    protected static string $resource = UserResource::class;

    /**
     * Verification stays admin-managed only (no self-service verify route is
     * registered): a user created here by an admin is, by that act, verified.
     * Without this, `email_verified_at` would stay null forever and
     * canAccessPanel() would permanently lock the new user out with no
     * in-app path to recover — the password-reset callback skips notifying
     * users that fail canAccessPanel() while still reporting success.
     *
     * `email_verified_at` is deliberately not added to User's #[Fillable]
     * list (it isn't a UserForm field either) so it can never be set via
     * mass assignment from form/API input — `forceFill()` bypasses that
     * guard here on purpose, after construction.
     */
    protected function handleRecordCreation(array $data): Model
    {
        /** @var User $record */
        $record = new (static::getModel())($data);
        $record->forceFill(['email_verified_at' => now()]);
        $record->save();

        return $record;
    }
}