import 'reflect-metadata';
import assert from 'node:assert/strict';
import test from 'node:test';
import { REQUIRED_PERMISSIONS_KEY } from '../../src/authorization/decorators/require-permissions.decorator';
import { InspectionActReportController, InspectionReportsController } from '../../src/inspection-reports/inspection-reports.controller';

function permissionFor(controller: object, method: string): string[] {
  const handler = controller[method as keyof typeof controller];
  return Reflect.getMetadata(REQUIRED_PERMISSIONS_KEY, handler) as string[];
}

test('D5.3.15 separates report consultation from report generation', () => {
  assert.deepEqual(permissionFor(InspectionReportsController.prototype, 'list'), ['inspection_reports.read']);
  assert.deepEqual(permissionFor(InspectionReportsController.prototype, 'pending'), ['inspection_reports.read']);
  assert.deepEqual(permissionFor(InspectionReportsController.prototype, 'get'), ['inspection_reports.read']);
  assert.deepEqual(permissionFor(InspectionActReportController.prototype, 'generate'), ['inspection_reports.generate']);
});