From 4909815807504262177a82ed69d5c61b7fd4aa4e Mon Sep 17 00:00:00 2001
From: echo <petrovskidimitar@yandex.com>
Date: Wed, 19 Nov 2025 05:07:14 +0100
Subject: [PATCH] minir fix

---
 apps/admin/data/fitai.db                      | Bin 73728 -> 73728 bytes
 .../src/app/api/admin/attendance/route.ts     |   2 +-
 apps/admin/src/app/api/admin/stats/route.ts   |   6 ++++++
 apps/mobile/src/app/(tabs)/index.tsx          |   3 +++
 apps/mobile/src/app/fitness-profile.tsx       |   7 ++++---
 5 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/apps/admin/data/fitai.db b/apps/admin/data/fitai.db
index c8b73bffccdabf601fc3875d9552c5003df3a4f5..d80323804930d79c84554658cb4f23feda101408 100644
GIT binary patch
delta 678
zcmZ{hKP&@L9LIa9>j{1R6@v)U4kqI6-FtoaPi``pqytkYjUF1QpaZ(F8YJXIVyam}
zBAt*(H)#xP9T}JnX3lGIJsRWhy?nl(_x-({YR68sV}DRk4u&QL<zntI-AyfKTGWuS
z#wuP~oa>d45`tqOvAb9fy`v+fRC?kAXxouG6A9by3)zeL6*Hx(##VN1(<p6ZmzD@7
zY+O~xRdW^x0yDw$l!dW{bs4KHv$$0VUIh^+@}pU%&b+g+X|kqfyWK;0q%IT6etD?H
z&ncD-s<nGsh$H@Z9L93Rg(55cQwJMXN|SY+r2crY$t%g2l6KEG!;wnv=0xa~pd5la
zyumfRKpD=U#+SMaqbQsZ{B=r=$!{HLO#a(Mw{}1A74ya;>QLiRXHag&xV1+#+@$>q
zP1>J0{n((j5In;zoWdTg!VGAfPJ+Al8lMV&fix7hh2Q_v+FPXkvQ<{(StU_`_1G1U
yK99LqAD7WCp=)|_Fo96NZM#oO(k**qVm4REuecB1NR(PwwJ?zh)-x5)6Oy0VsI<=j

delta 187
zcmZoTz|wGlWr8%L>O>i5M%9f8Q~W2-eb2KgfF*&4g)fDHe<r^X-)X*-&4L0Ue4A7D
zEnwtf;Xld1f1Up`|5N^xK;fPIlTV(vhKPd1uERv<-{+lt?Y<sRrk8>L3IB2aRs6j`
z^|kzy&E5+DEy-eK;4k9a1r%DxH+k2;ojlx(T)xiI^1KX^wziWW=qpT~|6iLeIVUqU
YuVnHCe^F)=(<l(lWMaDc|9?gW03HxR-T(jq

diff --git a/apps/admin/src/app/api/admin/attendance/route.ts b/apps/admin/src/app/api/admin/attendance/route.ts
index 3eb3059..4135941 100644
--- a/apps/admin/src/app/api/admin/attendance/route.ts
+++ b/apps/admin/src/app/api/admin/attendance/route.ts
@@ -10,7 +10,7 @@ export async function GET(req: Request) {
         const db = await getDatabase()
         const user = await db.getUserById(userId)
 
-        if (!user || user.role !== 'admin') {
+        if (!user || (user.role !== 'admin' && user.role !== 'superAdmin')) {
             return new NextResponse('Forbidden', { status: 403 })
         }
 
diff --git a/apps/admin/src/app/api/admin/stats/route.ts b/apps/admin/src/app/api/admin/stats/route.ts
index 45e4eab..b419d6a 100644
--- a/apps/admin/src/app/api/admin/stats/route.ts
+++ b/apps/admin/src/app/api/admin/stats/route.ts
@@ -8,6 +8,12 @@ export async function GET() {
         if (!userId) return new NextResponse('Unauthorized', { status: 401 })
 
         const db = await getDatabase()
+        const user = await db.getUserById(userId)
+
+        if (!user || (user.role !== 'admin' && user.role !== 'superAdmin')) {
+            return new NextResponse('Forbidden', { status: 403 })
+        }
+
         const stats = await db.getDashboardStats()
 
         return NextResponse.json(stats)
diff --git a/apps/mobile/src/app/(tabs)/index.tsx b/apps/mobile/src/app/(tabs)/index.tsx
index 62b58cd..850d91e 100644
--- a/apps/mobile/src/app/(tabs)/index.tsx
+++ b/apps/mobile/src/app/(tabs)/index.tsx
@@ -75,6 +75,8 @@ export default function HomeScreen() {
             <Ionicons name="chevron-forward" size={20} color="#9ca3af" />
           </TouchableOpacity>
 
+
+
           <View style={styles.actionButton}>
             <View style={styles.actionIcon}>
               <Ionicons name="log-in-outline" size={24} color="#2563eb" />
@@ -88,6 +90,7 @@ export default function HomeScreen() {
             <Ionicons name="chevron-forward" size={20} color="#9ca3af" />
           </View>
 
+
           <View style={styles.actionButton}>
             <View style={styles.actionIcon}>
               <Ionicons name="calendar-outline" size={24} color="#10b981" />
diff --git a/apps/mobile/src/app/fitness-profile.tsx b/apps/mobile/src/app/fitness-profile.tsx
index 8e72ac7..46c7505 100644
--- a/apps/mobile/src/app/fitness-profile.tsx
+++ b/apps/mobile/src/app/fitness-profile.tsx
@@ -13,6 +13,7 @@ import { useAuth } from "@clerk/clerk-expo";
 import { Ionicons } from "@expo/vector-icons";
 import { Input } from "../components/Input";
 import { Picker } from "../components/Picker";
+import { API_BASE_URL } from "../config/api";
 
 interface FitnessProfileData {
   height?: number;
@@ -64,7 +65,7 @@ export default function FitnessProfileScreen() {
     try {
       setFetchingProfile(true);
       const token = await getToken();
-      const apiUrl = process.env.EXPO_PUBLIC_API_URL || "http://localhost:3000";
+      const apiUrl = `${API_BASE_URL}` || "http://localhost:3000";
       const response = await fetch(`${apiUrl}/api/fitness-profile`, {
         headers: {
           Authorization: `Bearer ${token}`,
@@ -98,9 +99,9 @@ export default function FitnessProfileScreen() {
     try {
       setLoading(true);
       const token = await getToken();
-      const apiUrl = process.env.EXPO_PUBLIC_API_URL || "http://localhost:3000";
+      const apiUrl = `${API_BASE_URL}/api/fitness-profile` || "http://localhost:3000";
 
-      const response = await fetch(`${apiUrl}/api/fitness-profile`, {
+      const response = await fetch(`${apiUrl}`, {
         method: "POST",
         headers: {
           "Content-Type": "application/json",