Émile Profile API

openapi: 3.2.0
info:
  title: Émile Profile API
  description: '# Émile API


    Public API for the Émile wine cellar app.


    ## Authentication


    Two methods are supported:


    **1. API Key** (recommended for external clients: MCP servers, scripts, ChatGPT custom connectors)


    Send your key in the `X-API-Key` header OR as `Authorization: Bearer emile_live_...`.


    Generate keys from your iOS app: **Profil → Paramètres → Clés API**.


    **2. Supabase JWT** (used by the official iOS app — internal)


    Send `Authorization: Bearer `.


    ## Rate Limits


    All endpoints are rate-limited per user. See each endpoint''s documentation for specific limits.

    On exceeded: HTTP 429 with `Retry-After` header and `X-RateLimit-*` informational headers.


    | Endpoint | Limit |

    |---|---|

    | `POST /scan` | 10/min, 50/day |

    | `POST /me/scan:batch` | 5/hour |

    | `POST /recommendations` | 20/min, 100/day |

    | `POST /cellars/{id}/bottles` | 60/min, 500/day |

    | `POST /me/bottles:batch` | 10/hour, 50/day |

    | `POST /me/keys` | 5/hour, 20/day |'
  version: '1.0'
tags:
- name: Profile
paths:
  /me/profile:
    get:
      tags:
      - Profile
      summary: Get Profile
      description: 'Return the authenticated user''s profile.


        `email` comes from the JWT claim (always fresh — Supabase reissues the

        JWT on email change). `first_name` / `last_name` come from the profiles

        table. If the row is missing (rare: pre-trigger account), it is created

        on the fly so the endpoint always returns 200.'
      operationId: get_profile_me_profile_get
      security:
      - HTTPBearer: []
      parameters:
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
    patch:
      tags:
      - Profile
      summary: Patch Profile
      description: 'Update the authenticated user''s profile (partial update).


        - Absent fields are left unchanged (partial update semantics).

        - `email` always comes from the JWT; it is never modified by PATCH.

        - An empty body `{}` is treated as a no-op and returns the current

        profile (200).'
      operationId: patch_profile_me_profile_patch
      security:
      - HTTPBearer: []
      parameters:
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ProfileUpdate'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /me/account:
    delete:
      tags:
      - Profile
      summary: Delete account
      description: Permanently deletes the authenticated user's account and all associated data (bottles, cellars, api_keys, auth.users). Irreversible.
      operationId: delete_account_me_account_delete
      security:
      - HTTPBearer: []
      parameters:
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      responses:
        '204':
          description: Successful Response
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    ProfileUpdate:
      properties:
        first_name:
          anyOf:
          - type: string
            maxLength: 100
            minLength: 1
          - type: 'null'
          title: First Name
        last_name:
          anyOf:
          - type: string
            maxLength: 100
            minLength: 1
          - type: 'null'
          title: Last Name
        phone:
          anyOf:
          - type: string
            pattern: ^\+[1-9]\d{1,14}$|^$
          - type: 'null'
          title: Phone
      type: object
      title: ProfileUpdate
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
  securitySchemes:
    HTTPBearer:
      type: http
      scheme: bearer