<?php

use Illuminate\Support\Facades\Route;
use App\Http\Controllers\Admin\AuthController;
use App\Http\Controllers\Admin\System\StoreController;
use App\Http\Controllers\Admin\System\DepartmentController;
use App\Http\Controllers\Admin\System\PositionController;
use App\Http\Controllers\Admin\System\UserController;
use App\Http\Controllers\Admin\System\RoleController;
use App\Http\Controllers\Admin\System\MenuController;
use App\Http\Controllers\Admin\System\PermissionController;
use App\Http\Controllers\Admin\System\DictionaryController;
use App\Http\Controllers\Admin\System\OperationLogController;

/*
|--------------------------------------------------------------------------
| 后台管理 API 路由
|--------------------------------------------------------------------------
| 前缀: /api/v1/ (在 bootstrap/app.php 中配置)
*/

// ===== 公开路由（无需认证） =====
Route::post('/auth/login', [AuthController::class, 'login']);

// ===== 需要认证的路由 =====
Route::middleware(['auth:sanctum', 'store', 'oplog'])->group(function () {

    // --- 认证 ---
    Route::post('/auth/logout', [AuthController::class, 'logout']);
    Route::get('/auth/me', [AuthController::class, 'me']);

    // --- 系统设置模块 ---
    Route::prefix('system')->group(function () {

        // 门店管理
        Route::apiResource('stores', StoreController::class);

        // 部门管理
        Route::apiResource('departments', DepartmentController::class)->except(['show']);

        // 职务管理
        Route::apiResource('positions', PositionController::class)->except(['show']);

        // 用户管理
        Route::apiResource('users', UserController::class);
        Route::put('users/{user}/status', [UserController::class, 'updateStatus']);
        Route::put('users/{user}/password', [UserController::class, 'resetPassword']);

        // 角色管理
        Route::apiResource('roles', RoleController::class);
        Route::put('roles/{role}/permissions', [RoleController::class, 'assignPermissions']);

        // 菜单管理
        Route::apiResource('menus', MenuController::class)->except(['show']);

        // 权限管理
        Route::apiResource('permissions', PermissionController::class)->except(['show']);

        // 数据字典
        Route::apiResource('dictionaries', DictionaryController::class)->except(['show', 'update']);
        Route::get('dictionaries/{dictionary}/items', [DictionaryController::class, 'items']);
        Route::post('dictionaries/{dictionary}/items', [DictionaryController::class, 'storeItem']);
        Route::put('dictionary-items/{item}', [DictionaryController::class, 'updateItem']);
        Route::delete('dictionary-items/{item}', [DictionaryController::class, 'destroyItem']);

        // 操作日志
        Route::get('operation-logs', [OperationLogController::class, 'index']);
    });
});