fix and update language for company workspace

apps/api/src/routes/auth.employee.ts

@@ -28,6 +28,68 @@ function buildResetEmailHtml(resetUrl: string, firstName: string) {
   `
 }
 
+router.get('/me', async (req, res, next) => {
+  try {
+    const authHeader = req.headers.authorization
+    const token = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null
+
+    if (!token) {
+      return res.status(401).json({
+        error: 'unauthenticated',
+        message: 'Authentication required',
+        statusCode: 401,
+      })
+    }
+
+    let employeeId = ''
+    try {
+      const payload = jwt.verify(token, process.env.JWT_SECRET!) as { sub: string; type: string }
+      if (payload.type !== 'employee') {
+        return res.status(401).json({
+          error: 'invalid_token',
+          message: 'Invalid or expired session token',
+          statusCode: 401,
+        })
+      }
+      employeeId = payload.sub
+    } catch {
+      return res.status(401).json({
+        error: 'invalid_token',
+        message: 'Invalid or expired session token',
+        statusCode: 401,
+      })
+    }
+
+    const employee = await prisma.employee.findUnique({
+      where: { id: employeeId },
+      include: { company: true },
+    })
+
+    if (!employee || !employee.isActive) {
+      return res.status(401).json({
+        error: 'unauthenticated',
+        message: 'Employee account not found or inactive',
+        statusCode: 401,
+      })
+    }
+
+    res.json({
+      data: {
+        employee: {
+          id: employee.id,
+          email: employee.email,
+          firstName: employee.firstName,
+          lastName: employee.lastName,
+          role: employee.role,
+          companyId: employee.companyId,
+          companyName: employee.company.name,
+          companySlug: employee.company.slug,
+        },
+      },
+    })
+  } catch (err) { next(err) }
+})
+
 router.post('/login', async (req, res, next) => {
   try {
     const { email, password } = z.object({