import { NextResponse } from "next/server";
import { authorizeApiRequest } from "@/server/http/api-auth";

/** Usuario actual y sus permisos (para la UI del panel). */
export async function GET(request: Request): Promise<NextResponse> {
  const auth = await authorizeApiRequest(request);
  if (!auth.ok) return auth.response;
  const { user, permissions } = auth.session;
  return NextResponse.json(
    {
      user: { id: user.id, name: user.name, email: user.email, role: user.roleKey },
      permissions: [...permissions].sort(),
    },
    { headers: { "Cache-Control": "no-store" } },
  );
}