<?php

namespace Modules\Platform\app\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class EnsureTenantAssigned
{
    /**
     * Ensure the authenticated user belongs to a company tenant.
     */
    public function handle(Request $request, Closure $next): Response
    {
        $user = $request->user();

        abort_if(! $user || ! $user->company_id, 403, 'No company is assigned to this account.');

        return $next($request);
    }
}