<?php

namespace App\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use App\Http\Resources\RoleResource;
use Illuminate\Http\Request;
use Spatie\Permission\Models\Role;

class RoleController extends Controller
{
    public function index(Request $request)
    {
        abort_unless($request->user()->can('roles.view'), 403);

        // Super Admin is intentionally excluded — it's granted only via
        // seeding/tinker, never assignable through the Users module.
        return RoleResource::collection(Role::where('name', '!=', 'super-admin')->orderBy('name')->get());
    }
}