<?php

use App\Http\Controllers\Api\CliDeviceController;
use App\Http\Controllers\Api\GpuCatalogController;
use App\Http\Controllers\Api\MeController;
use Illuminate\Support\Facades\Route;

Route::get('/me', MeController::class)->middleware('auth:sanctum');

Route::middleware('auth:sanctum')->group(function () {
    Route::get('/gpus', [GpuCatalogController::class, 'index'])->middleware('ability:gpus:read');
});

Route::middleware('throttle:10,1')->group(function () {
    // Device authorization front door — public but rate-limited.
    Route::post('/cli/device', [CliDeviceController::class, 'request']);
    Route::post('/cli/poll', [CliDeviceController::class, 'poll']);
});