postcast-tool/app/api/user-posts/[id]/route.js

import { NextResponse } from 'next/server';
import { requireUser } from '@/lib/session';
import { engine } from '@/lib/engine';

export async function PATCH(req, { params }) {
  const user = await requireUser();
  if (!user) return NextResponse.json({error:'Unauthorized'},{status:401});
  const { id } = await params;
  const body = await req.json();
  try {
    const data = await engine.updatePost(user.id, id, body);
    return NextResponse.json(data);
  } catch (e) { return NextResponse.json({error:e.message},{status:500}); }
}

export async function DELETE(req, { params }) {
  const user = await requireUser();
  if (!user) return NextResponse.json({error:'Unauthorized'},{status:401});
  const { id } = await params;
  try {
    await engine.deletePost(user.id, id);
    return NextResponse.json({ok:true});
  } catch (e) { return NextResponse.json({error:e.message},{status:500}); }
}