import { NextResponse } from "next/server";
import { cookies } from "next/headers";
import { assertSameOrigin, requireUser, revokeAllSessions, COOKIE } from "@/lib/auth/session";
import { audit } from "@/lib/auth/audit";
import { handle } from "@/lib/api";
export const dynamic = "force-dynamic";
export async function POST() {
  try { await assertSameOrigin(); const u = await requireUser(); await revokeAllSessions(u.id); await audit("auth.logout_all", { actorId: u.id }); (await cookies()).delete(COOKIE); return NextResponse.json({ ok: true }); } catch (e) { return handle(e); }
}