import { FastifyRequest, FastifyReply } from 'fastify';

export async function tenantGuard(
  request: FastifyRequest & { user?: { tenantId: number }, tenantId?: number },
  reply: FastifyReply
) {
  const userTenantId = request.user?.tenantId;
  const resourceTenantId = request.tenantId || (request.params as any)?.tenantId;

  if (resourceTenantId && Number(resourceTenantId) !== userTenantId) {
    return reply.status(403).send({ error: 'Acceso denegado a este tenant' });
  }
}