import { z } from "zod";
import { guarded, json, body } from "@/lib/api";
import { listSessions, revokeSession, revokeAllSessions } from "@/lib/auth";

export const GET = guarded(async (_req, { session }) => json({ sessions: await listSessions(session.id) }));

export const DELETE = guarded(async (req, { session }) => {
  const { id, all } = await body(req, z.object({ id: z.string().optional(), all: z.boolean().optional() }));
  if (all) await revokeAllSessions(session.id); else if (id && id !== session.id) await revokeSession(id);
  return json({ ok: true });
});