middleware.ts

import NextAuth from "next-auth"
import { authConfig } from "@/auth.config"

const { auth } = NextAuth(authConfig)

export default auth((req) => {
  const isLoggedIn = !!req.auth
  const isOnDashboard = req.nextUrl.pathname.startsWith("/dashboard")
  const isOnOnboarding = req.nextUrl.pathname.startsWith("/onboarding")
  const isOnAdmin = req.nextUrl.pathname.startsWith("/admin")
  const onboardingCompleted = req.auth?.user?.onboardingCompleted
  const userRole = req.auth?.user?.role

  if (isOnAdmin) {
    if (!isLoggedIn) {
      return Response.redirect(new URL("/login", req.nextUrl))
    }
    if (userRole !== "ADMIN") {
      return Response.redirect(new URL("/dashboard", req.nextUrl))
    }
    return
  }

  if (isOnDashboard) {
    if (isLoggedIn) {
      return
    }
    return Response.redirect(new URL("/login", req.nextUrl))
  }

  if (isOnOnboarding) {
    if (!isLoggedIn) {
      return Response.redirect(new URL("/login", req.nextUrl))
    }
    // Allow access to /onboarding for all logged-in users so they can generate new roadmaps
    return
  }
})

export const config = {
  matcher: ["/dashboard/:path*", "/onboarding/:path*", "/admin/:path*"],
}