property-management-network/app/api/activity/route.ts

import { NextResponse } from "next/server"
import { desc, eq } from "drizzle-orm"
import { db } from "@/lib/db"
import { activity_log } from "@/lib/db/schema"
import { getSessionUser } from "@/lib/session"
import { getEffectiveOwnerId } from "@/lib/account"

export async function GET(request: Request) {
  const user = await getSessionUser()
  if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })

  const ownerId = await getEffectiveOwnerId(user.id)

  const { searchParams } = new URL(request.url)
  const limit = Math.min(100, parseInt(searchParams.get("limit") ?? "50", 10))

  try {
    const data = await db
      .select()
      .from(activity_log)
      .where(eq(activity_log.user_id, ownerId))
      .orderBy(desc(activity_log.created_at))
      .limit(limit)

    return NextResponse.json(data)
  } catch (e) {
    return NextResponse.json({ error: (e as Error).message }, { status: 500 })
  }
}