import { NextResponse } from "next/server";
import { prisma } from "@/lib/prisma";
import { requireAnyRole, MEMBER_ROLES } from "@/lib/auth";

/** Member Fees page → the institution's active collection accounts, so
    students/parents know where to pay. */
export async function GET() {
  const session = await requireAnyRole(MEMBER_ROLES);
  if (!session?.institutionId) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
  }
  const accounts = await prisma.collectionAccount.findMany({
    where: { institutionId: session.institutionId, isActive: true },
    orderBy: [{ sortOrder: "asc" }, { id: "asc" }],
    select: {
      type: true, provider: true, accountType: true, label: true,
      accountName: true, accountNumber: true, branch: true, routingNo: true, note: true,
    },
  });
  return NextResponse.json({ accounts });
}