import { NextResponse } from "next/server";
import { ADMIN_CSRF_COOKIE, ADMIN_SESSION_COOKIE } from "@/lib/admin-auth";
import { SESSION_COOKIE } from "@/lib/auth";
import { OPERATOR_SESSION_COOKIE } from "@/lib/operator-auth";
import { revokeAllCurrentSessions } from "@/lib/session-logout";
import { recordAudit } from "@/lib/audit";

export async function POST() {
  await revokeAllCurrentSessions();
  const response = NextResponse.json({ ok: true });
  response.cookies.delete(ADMIN_SESSION_COOKIE);
  response.cookies.delete(ADMIN_CSRF_COOKIE);
  response.cookies.delete(SESSION_COOKIE);
  response.cookies.delete(OPERATOR_SESSION_COOKIE);
  await recordAudit("admin_logout");
  return response;
}