<?php

namespace App\Models;

// use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Illuminate\Database\Eloquent\SoftDeletes; 
class User extends Authenticatable
{
    /** @use HasFactory<\Database\Factories\UserFactory> */
    use HasFactory, Notifiable, SoftDeletes; 

    /**
     * The attributes that are mass assignable.
     *
     * @var list<string>
     */
    protected $fillable = [
        'nombre',      
        'apellido',   
        'email',
        'usuario',    
        'celular',     
        'password',
    ];

    /**
     * The attributes that should be hidden for serialization.
     *
     * @var list<string>
     */
    protected $hidden = [
        'password',
        'remember_token',
    ];

    /**
     * Get the attributes that should be cast.
     *
     * @return array<string, string>
     */
    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
        ];
    }

    
    public function roles()
    {
        
        return $this->belongsToMany(Role::class);
    }

    /**
     * Comprueba si el usuario tiene un permiso específico a través de sus roles.
     */
    public function hasPermission($slug)
    {
        // El Administrador siempre tiene todos los permisos por defecto
        if ($this->roles->contains('nombre_rol', 'Administrador')) {
            return true;
        }

        foreach ($this->roles as $role) {
            if ($role->permissions->where('slug', $slug)->first()) {
                return true;
            }
        }
        return false;
    }
}