// Auteur : Simon-Pierre Boucher — contact@spboucher.ai
// Active/désactive le profil public groupe-ka.com/u/{ka_id} (opt-in).
import { NextRequest, NextResponse } from "next/server";
import { db } from "@/lib/db";
import { getSessionUser } from "@/lib/auth";

export async function POST(req: NextRequest) {
  const user = await getSessionUser();
  if (!user)
    return NextResponse.json({ error: "Non connecté." }, { status: 401 });
  const body = (await req.json().catch(() => ({}))) as { enabled?: boolean };
  const enabled = body.enabled === true;
  db.prepare("UPDATE users SET public = ? WHERE id = ?").run(
    enabled ? 1 : 0,
    user.id,
  );
  return NextResponse.json({ ok: true, public: enabled });
}