import 'reflect-metadata';
import assert from 'node:assert/strict';
import test from 'node:test';
import { AssetMediaController } from '../../src/asset-master/asset-media.controller';
import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator';

function permissionFor(method: string): string[] {
  const controller = AssetMediaController.prototype;
  const handler = controller[method as keyof typeof controller];
  return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[];
}

test('media reads and content use assets.read_media', () => {
  assert.deepEqual(permissionFor('list'), ['assets.read_media']);
  assert.deepEqual(permissionFor('content'), ['assets.read_media']);
});

test('media mutations use assets.manage_media', () => {
  assert.deepEqual(permissionFor('upload'), ['assets.manage_media']);
  assert.deepEqual(permissionFor('update'), ['assets.manage_media']);
  assert.deepEqual(permissionFor('remove'), ['assets.manage_media']);
});