// Auteur : Simon-Pierre Boucher — contact@spboucher.ai
// Favoris du membre connecté (pour la page /compte du hub).
//   GET → { favorites: [...] }   POST { action:"remove", app, item_id }
import { NextRequest, NextResponse } from "next/server";
import { getSessionUser } from "@/lib/auth";
import { favoritesOf, removeFavorite } from "@/lib/db";

export async function GET() {
  const user = await getSessionUser();
  if (!user)
    return NextResponse.json({ error: "Non connecté." }, { status: 401 });
  return NextResponse.json({ favorites: favoritesOf(user.id) });
}

export async function POST(req: NextRequest) {
  const user = await getSessionUser();
  if (!user)
    return NextResponse.json({ error: "Non connecté." }, { status: 401 });
  const body = (await req.json().catch(() => ({}))) as {
    action?: string;
    app?: string;
    item_id?: string;
  };
  if (body.action !== "remove" || !body.app || !body.item_id)
    return NextResponse.json({ error: "Requête invalide." }, { status: 400 });
  removeFavorite(user.id, body.app, body.item_id);
  return NextResponse.json({ ok: true });
}