const express = require('express')

const requireInternalKey = require('../../../middleware/requireInternalKey')
const ctrl = require('./internal.controller')

const router = express.Router()

// Shared-secret gated, not session-gated — the caller is the bot process, not
// a logged-in browser. This router is mounted on the standalone internalApp
// (its own unpublished port), never on the public /api app. See internalApp.js.
router.use(requireInternalKey)

router.get(
  '/bot-config',
  // #swagger.ignore = true
  ctrl.getBotConfig,
)

module.exports = router
