import { desc } from 'drizzle-orm'
import { db } from '~/drizzle/db'
import { changelogEntries } from '~/drizzle/schema'

export default defineEventHandler(async (event) => {
  const user = event.context.user

  if (!user) {
    throw createError({ statusCode: 401, message: '未授权访问' })
  }

  if (!['ADMIN', 'SUPER_ADMIN'].includes(user.role)) {
    throw createError({ statusCode: 403, message: '只有管理员才能查看更新日志' })
  }

  return db.select().from(changelogEntries).orderBy(desc(changelogEntries.createdAt))
})