export default defineNuxtRouteMiddleware(async () => {
  if (import.meta.server) return;
  const session = useSessionStore();
  if (!session.token) session.hydrate();
  if (!session.token) return navigateTo("/login");
  // Trust the auth API's answer rather than whatever localStorage claims; a
  // rejected token clears the session inside validate().
  if (!(await session.validate())) return navigateTo("/login");
  if (session.user?.role !== "customer") return navigateTo("/login");
});