property-management-network/app/api/profile/route.ts

import { NextResponse } from "next/server"
import { eq } from "drizzle-orm"
import { db } from "@/lib/db"
import { profiles } from "@/lib/db/schema"
import { getSessionUser } from "@/lib/session"

export async function GET() {
  const user = await getSessionUser()
  if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })

  // Exclude bearer/secret + billing-id columns from the client payload. The
  // calendar feed token and Stripe/PayPal ids are used server-side only.
  const profile = await db.query.profiles.findFirst({
    where: eq(profiles.id, user.id),
    columns: {
      calendar_token: false,
      stripe_customer_id: false,
      stripe_subscription_id: false,
      paypal_subscription_id: false,
      billing_provider: false,
    },
  })

  return NextResponse.json({ profile: profile ?? null })
}

export async function PATCH(request: Request) {
  const user = await getSessionUser()
  if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })

  const body = (await request.json()) as Record<string, unknown>

  // Whitelist editable profile fields.
  const update: Partial<typeof profiles.$inferInsert> = {}
  if (typeof body.full_name === "string") update.full_name = body.full_name
  if ("phone" in body) update.phone = (body.phone as string) || null
  if ("company_name" in body) update.company_name = (body.company_name as string) || null

  const [profile] = await db
    .update(profiles)
    .set(update)
    .where(eq(profiles.id, user.id))
    .returning()

  return NextResponse.json({ profile })
}