<?php

namespace App\Models;

use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Laravel\Sanctum\HasApiTokens;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Illuminate\Database\Eloquent\Relations\HasMany;

class User extends Authenticatable
{
    use HasApiTokens, HasFactory, Notifiable;

    protected $fillable = [
        'nombre',
        'email',
        'password',
        'role',
        'cliente_id',
    ];

    protected $hidden = [
        'password',
        'remember_token',
    ];

    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
        ];
    }

    public function cliente(): BelongsTo
    {
        return $this->belongsTo(Cliente::class);
    }

    public function permisosEmpleado(): HasMany
    {
        return $this->hasMany(PermisoEmpleado::class);
    }

    public function isAdmin(): bool
    {
        return $this->role === 'admin';
    }

    public function isAnalista(): bool
    {
        return $this->role === 'analista';
    }

    public function isCliente(): bool
    {
        return $this->role === 'cliente';
    }

    public function isEmpleado(): bool
    {
        return $this->role === 'empleado';
    }

    public function canAccessCliente(int $clienteId): bool
    {
        if ($this->isAdmin() || $this->isAnalista()) {
            return true;
        }

        return $this->cliente_id === $clienteId;
    }
}