import { NextRequest, NextResponse } from 'next/server'
import { requireAdmin } from '@/lib/admin-auth'
import { createServiceClient } from '@/lib/supabase'

export async function POST(req: NextRequest) {
  const check = await requireAdmin()
  if (check instanceof NextResponse) return check

  const { order } = await req.json() as { order: { id: string; reihenfolge: number }[] }
  if (!Array.isArray(order)) return NextResponse.json({ error: 'order array erforderlich' }, { status: 400 })

  const db = createServiceClient()
  await Promise.all(order.map(({ id, reihenfolge }) =>
    db.from('galerie_bilder').update({ reihenfolge }).eq('id', id)
  ))
  return NextResponse.json({ success: true })
}