import { getSession, revokeSession, clearSessionCookie } from "@/lib/auth/session";
import { assertSameOrigin, jsonError } from "@/lib/auth/guard";
import { audit } from "@/lib/audit";
export async function POST() {
  try { await assertSameOrigin(); const s = await getSession(); if (s) { await revokeSession(s.sessionId); await audit({ id: s.id, name: s.email }, "auth.logout"); } await clearSessionCookie(); return Response.json({ ok: true }); } catch (e) { return jsonError(e); }
}