distribution_erp/src/app/api/auth/me/route.ts

import { NextResponse } from "next/server";
import { getSession } from "@/lib/session";
import { queryOne } from "@/lib/db";

export async function GET() {
  const user = await getSession();
  if (!user) {
    return NextResponse.json({ success: false }, { status: 401 });
  }
  // 특수 권한 (발주한도 무시 / 숨김품목 보기) + 기본 용차비 설정 같이 내려줌.
  // default_charter_* 컬럼이 운영DB 에 아직 없을 수 있어 try-catch 로 안전 처리.
  let perms = { unlimitedQty: false, viewHidden: false, defaultCharterUse: false, defaultCharterPrice: 0 };
  try {
    const row = await queryOne<{ U: string; V: string; CU: string; CP: string }>(
      `SELECT COALESCE(unlimited_qty, 'N') AS "U",
              COALESCE(view_hidden,    'N') AS "V",
              COALESCE(default_charter_use,   'N') AS "CU",
              COALESCE(default_charter_price, 0)::text AS "CP"
       FROM user_info WHERE user_id = $1`,
      [user.userId]
    );
    if (row) perms = {
      unlimitedQty: row.U === "Y",
      viewHidden: row.V === "Y",
      defaultCharterUse: row.CU === "Y",
      defaultCharterPrice: Number(row.CP) || 0,
    };
  } catch {
    // 컬럼이 없는 경우 폴백 — 기존 권한만 다시 조회
    try {
      const row = await queryOne<{ U: string; V: string }>(
        `SELECT COALESCE(unlimited_qty, 'N') AS "U", COALESCE(view_hidden, 'N') AS "V"
         FROM user_info WHERE user_id = $1`,
        [user.userId]
      );
      if (row) perms = { ...perms, unlimitedQty: row.U === "Y", viewHidden: row.V === "Y" };
    } catch { /* ignore */ }
  }
  return NextResponse.json({ success: true, user: { ...user, ...perms } });
}