import { requireAuth } from '~/server/utils/auth'
import { nodes } from '~/server/utils/db'

export default defineEventHandler(async (event) => {
  const user = requireAuth(event)

  // RBAC: filter nodes by assigned_to or role
  const allNodes = Array.from(nodes.values())
  const filtered = user.role === 'admin'
    ? allNodes
    : allNodes.filter((n: any) => n.assigned_to === user.id || n.assigned_to === 'all')

  return { nodes: filtered }
})