get:
  operationId: getUserInfo
  summary: Get logged-in user info
  description: |
    Permission: **ADMIN, OWNER, STAFF**

    Returns the logged-in staff user's profile and the permission codes
    granted by their assigned RBAC role.
    - The user is resolved from the authenticated session.
    - Inactive or deactivated staff accounts are rejected.
    - `permissions` contains permission code strings from the RBAC role matrix.
  tags: [staffManagement]
  security:
    - bearerAuth: []
  responses:
    "200":
      description: Logged-in user info — DTO returned directly
      content:
        application/json:
          schema:
            $ref: "../../components.yaml#/components/schemas/GetUserInfoResponse"
          example:
            user_id: "6643f1a2b4c5d60012e34abc"
            first_name: "Ada"
            last_name: "Lovelace"
            second_last_name: "Byron"
            username: "nova.ada_lovelace"
            email: "ada@example.com"
            phone: "+84901234567"
            role: "ADMIN"
            status: "active"
            two_fa_status: "VERIFIED"
            must_change_password: false
            failed_login_attempts: 0
            last_login: "05/06/2026 09:30"
            created_at: "01/06/2026 08:00"
            created_by: "6643f1a2b4c5d60012e34def"
            permissions:
              - "station_management:access"
              - "station:list"
              - "station:view_details"
              - "staff_management:access"
              - "staff:list"
    "400":
      $ref: "../../components.yaml#/components/responses/Failure"