/**
 * Disconnect route — isolated adapter layer (L5 audit fix: no direct provider ref in route).
 */

import { disconnectFromProvider } from '../../../../lib/auth-adapter/disconnect-adapter.js';

export default async function handler(req, res) {
  // Route uses adapter only; no provider import outside adapter.
  const result = await disconnectFromProvider({ userId: req.body?.userId }, {
    provider: null, // adapter injects; route does not reference directly
  });
  return res.status(200).json({ success: true, ...result });
}