import type { FastifyInstance } from 'fastify';
import { listHandler, createHandler, updateHandler, deleteHandler } from '../controllers/item.controller.js';
import { authorize, authorizeAny } from '../plugins/authorize.js';
import { PERMISSIONS } from '../constants/permissions.js';
import { createItemSchema, updateItemSchema } from '../schemas/item.schema.js';

const CAN_BROWSE_PRODUCTS = [PERMISSIONS.PRODUCTS_VIEW, PERMISSIONS.ORDERS_VIEW, PERMISSIONS.ORDERS_CREATE, PERMISSIONS.ORDERS_EDIT];

export default async function itemRoutes(fastify: FastifyInstance) {
  fastify.get('/api/items', { preHandler: [authorizeAny(CAN_BROWSE_PRODUCTS)] }, listHandler);
  fastify.post('/api/items', { preHandler: [authorize(PERMISSIONS.PRODUCTS_CREATE)], schema: createItemSchema }, createHandler);
  fastify.put('/api/items/:id', { preHandler: [authorize(PERMISSIONS.PRODUCTS_EDIT)], schema: updateItemSchema }, updateHandler);
  fastify.delete('/api/items/:id', { preHandler: [authorize(PERMISSIONS.PRODUCTS_DELETE)] }, deleteHandler);
}