<?php

namespace Maestro\Core\Models;

// use Illuminate\Contracts\Auth\MustVerifyEmail;
use Maestro\Core\Database\Factories\UserFactory;
use Illuminate\Database\Eloquent\Attributes\Fillable;
use Illuminate\Database\Eloquent\Attributes\Hidden;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Spatie\Permission\Traits\HasRoles;

#[Fillable([
    'name',
    'email',
    'password',
    'organization_id',
    'is_active',
])]
#[Hidden(['password', 'remember_token'])]
class User extends Authenticatable
{
    /** @use HasFactory<\Maestro\Core\Database\Factories\UserFactory> */
    use HasFactory, HasRoles, Notifiable;

    /**
     * Spatie resolves guards by matching auth provider model class; hosts often register
     * {@see \App\Models\User} while this package seeds {@see User}. Returning the configured
     * default guard keeps roles and permissions aligned with the application.
     *
     * @return string|array<int, string>
     */
    public function guardName(): string|array
    {
        $guard = config('auth.defaults.guard');

        return (is_string($guard) && $guard !== '') ? $guard : 'web';
    }

    /** @return BelongsTo<Organization, User> */
    public function organization(): BelongsTo
    {
        return $this->belongsTo(Organization::class);
    }

    /**
     * Get the attributes that should be cast.
     *
     * @return array<string, string>
     */
    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
            'is_active' => 'boolean',
        ];
    }
}
