/**
 * POST /api/offers/contract/signing-cancel  { token }
 * Invalidates a pending signing link (e.g. sent to the wrong address).
 */
import { getSigningRequestByToken, cancelSigningRequest } from '../../../utils/offers/contractSigningDb'

export default defineEventHandler(async (event) => {
  const auth = await getTokenHelper(event)
  if (!auth) return { status: 401, message: 'Not authenticated' }
  const body = await readBody(event)
  const token = String(body?.token || '')
  const req = getSigningRequestByToken(token)
  if (!req) return { status: 404, message: 'Unknown signing request' }
  cancelSigningRequest(token)
  return { status: 200 }
})