import { Router, type IRouter } from 'express';
import { authenticate, authorize } from '../middlewares/auth.middleware.js';
import * as auditLogController from '../controllers/audit-log.controller.js';

const router: IRouter = Router();

router.use(authenticate);
router.use(authorize('owner', 'cfo'));

// Solo admin global (verificado dentro del controller)
router.get('/', auditLogController.listAuditLog);

export { router as auditLogRoutes };
