sfp_api_laravel_ginastica_cerebro/app/Http/Resources/CompanyPaymentAccountResource.php

<?php

namespace App\Http\Resources;

use Illuminate\Http\Request;
use Illuminate\Http\Resources\Json\JsonResource;

/**
 * Nunca expõe a api_key em texto puro: apenas se está configurada e mascarada.
 */
class CompanyPaymentAccountResource extends JsonResource
{
    public function toArray(Request $request): array
    {
        $key = $this->asaas_api_key;

        return [
            'status'               => $this->status ?? 'pending',
            'asaas_configured'     => filled($key),
            'asaas_api_key_masked' => filled($key)
                ? str_repeat('•', 8) . mb_substr($key, -4)
                : null,
            'onboarded_at'         => $this->onboarded_at?->format('Y-m-d H:i:s'),
        ];
    }
}