app.js

require('dotenv').config();
const express = require('express');
const cors = require('cors');
const helmet = require('helmet');
const morgan = require('morgan');

// Import routes
const authRoutes = require('./routes/auth');
const companyRoutes = require('./routes/companies');
const userRoutes = require('./routes/users');
const employeeRoutes = require('./routes/employees');
const salaryRoutes = require('./routes/salaries');
const leaveRoutes = require('./routes/leaves');

// Import middleware
const { verifyToken, checkRole } = require('./middleware/auth');

const app = express();

// Middleware
app.use(cors());
app.use(helmet());
app.use(morgan('dev'));
app.use(express.json());
app.use(express.urlencoded({ extended: true }));

// Routes
app.use('/api/auth', authRoutes);
app.use('/api/companies', verifyToken, checkRole(['super_admin']), companyRoutes);
app.use('/api/users', verifyToken, userRoutes);
app.use('/api/employees', verifyToken, checkRole(['admin']), employeeRoutes);
app.use('/api/salaries', verifyToken, salaryRoutes);
app.use('/api/leaves', verifyToken, leaveRoutes);

// Error handling
app.use((err, req, res, next) => {
  console.error(err.stack);
  res.status(500).json({ message: 'Something broke!' });
});

module.exports = app;