const router = require("express").Router();
const controller = require("../controllers/lists.controller");
const auth = require("../middleware/auth");
const requireRole = require("../middleware/rbac");


router.get("/", auth, requireRole("viewer", "editor", "admin"), controller.getList);


router.post("/add", auth, requireRole("editor", "admin"), controller.addItem);
router.post("/mark-bought", auth, requireRole("editor", "admin"), controller.markBought);


module.exports = router;