import { Prisma, User } from '@prisma/client';

// DB-level projection of the allow-list below — keep the two in sync.
export const publicUserSelect = {
  id: true,
  email: true,
  firstName: true,
  lastName: true,
  updatedAt: true,
  avatarKey: true,
  avatarURL: true,
  active: true,
  pushEnabled: true,
  dailyReminderTime: true,
  weeklyResumeEnabled: true,
  onboardingSeenAt: true,
} satisfies Prisma.UserSelect;

// The only shape a user leaves the API in. Everything not listed here
// (encryptedPassword, reset secrets, activation code, pushToken) stays server-side.
export const publicUser = (user: User) => ({
  id: user.id,
  email: user.email,
  firstName: user.firstName,
  lastName: user.lastName,
  updatedAt: user.updatedAt,
  avatarKey: user.avatarKey,
  avatarURL: user.avatarURL,
  active: user.active,
  pushEnabled: user.pushEnabled,
  dailyReminderTime: user.dailyReminderTime,
  weeklyResumeEnabled: user.weeklyResumeEnabled,
  onboardingSeenAt: user.onboardingSeenAt,
});