Merge pull request #905 from chinecherem58/issue-822-stealth-meta-address

feat: add stealth_meta_address to user profile and profile endpoints …

Author: Calebux

backend/src/routes/user.ts

@@ -7,6 +7,8 @@
 import express, { Response } from 'express';
 import { supabase } from '../config/database';
 import { authenticate, AuthenticatedRequest } from '../middleware/auth';
+import { validateRequest } from '../utils/validation';
+import { userProfileUpdateSchema } from '../schemas/user-profile';
 import logger from '../config/logger';
 import { roleService } from '../services/role-service';
 
@@ -148,4 +150,60 @@ router.delete('/account', async (req: AuthenticatedRequest, res: Response) => {
   }
 });
 
+/**
+ * GET /api/user/profile
+ * Returns the current user's profile data.
+ */
+router.get('/profile', async (req: AuthenticatedRequest, res: Response) => {
+  try {
+    const userId = req.user!.id;
+    const { data: profile, error } = await supabase
+      .from('profiles')
+      .select('id, display_name, company_name, plan_type, stealth_meta_address, created_at, updated_at')
+      .eq('id', userId)
+      .single();
+
+    if (error) {
+      logger.error('Error fetching user profile:', error);
+      return res.status(500).json({ success: false, error: 'Failed to fetch profile' });
+    }
+
+    return res.status(200).json({ success: true, data: profile });
+  } catch (error) {
+    logger.error('Error fetching user profile:', error);
+    return res.status(500).json({ success: false, error: 'Failed to fetch profile' });
+  }
+});
+
+/**
+ * PUT /api/user/profile
+ * Update profile fields such as display name, company name, or stealth meta-address.
+ */
+router.put('/profile', async (req: AuthenticatedRequest, res: Response) => {
+  try {
+    const userId = req.user!.id;
+    const validatedData = validateRequest(userProfileUpdateSchema, req.body);
+
+    const { data: profile, error } = await supabase
+      .from('profiles')
+      .update({
+        ...validatedData,
+        updated_at: new Date().toISOString(),
+      })
+      .eq('id', userId)
+      .select()
+      .single();
+
+    if (error) {
+      logger.error('Error updating user profile:', error);
+      return res.status(500).json({ success: false, error: 'Failed to update profile' });
+    }
+
+    return res.status(200).json({ success: true, data: profile });
+  } catch (error) {
+    logger.error('Error updating user profile:', error);
+    return res.status(500).json({ success: false, error: 'Failed to update profile' });
+  }
+});
+
 export default router;

backend/src/schemas/user-profile.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+
+export const userProfileUpdateSchema = z.object({
+  display_name: z.string().min(1, 'Display name must not be empty').max(200).optional(),
+  company_name: z.string().max(200).optional(),
+  stealth_meta_address: z.string().max(1024).optional(),
+});

backend/src/services/subscription-service.ts

@@ -50,14 +50,20 @@ export class SubscriptionService {
 
         const stealthIndex = indexRow ? (indexRow.stealth_index as number) + 1 : 0;
 
-        // Derive stealth address when a meta-address is available
-        const metaAddress = process.env.STEALTH_META_ADDRESS;
-        let stealthAddress: string | null = null;
-        if (metaAddress) {
-          // subscriptionId is not yet known; we will update after insert
-          // Store null initially and patch below once we have the row id
+        // Derive stealth address when the user has a stored stealth meta-address.
+        const { data: profile, error: profileError } = await client
+          .from('profiles')
+          .select('stealth_meta_address')
+          .eq('id', userId)
+          .single();
+
+        if (profileError) {
+          throw new Error(`Failed to load user profile: ${profileError.message}`);
         }
 
+        const metaAddress = profile?.stealth_meta_address ?? null;
+        let stealthAddress: string | null = null;
+
         const { data: subscription, error: dbError } = await client
           .from("subscriptions")
           .insert({

client/scripts/001_create_users_and_profiles.sql

@@ -4,6 +4,7 @@ create table if not exists public.profiles (
   display_name text,
   company_name text,
   plan_type text default 'free' check (plan_type in ('free', 'pro', 'enterprise')),
+  stealth_meta_address text,
   created_at timestamp with time zone default now(),
   updated_at timestamp with time zone default now()
 );

supabase/migrations/20260624000000_add_stealth_meta_address_to_profiles.sql

@@ -0,0 +1,8 @@
+-- Migration: Add stealth meta-address storage to user profiles.
+-- Issue: #822 - Persist per-user stealth meta-address for subscription stealth address derivation.
+
+ALTER TABLE public.profiles
+  ADD COLUMN IF NOT EXISTS stealth_meta_address TEXT;
+
+COMMENT ON COLUMN public.profiles.stealth_meta_address IS
+  'User-level stealth meta-address used to derive unique subscription stealth addresses.';