<?php
// POST api/reset.php -> delete the logged-in user's progress for a scope.
//      JSON body: {scope: all|folder|video|quiz, id?}
//      Only ever touches the current user's rows; the library itself is untouched.
require_once __DIR__ . '/../includes/auth.php';
require_once __DIR__ . '/../includes/functions.php';

header('Content-Type: application/json');
$userId = requireLoginApi();

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['error' => 'Method not allowed']);
    exit;
}

$data  = json_decode(file_get_contents('php://input'), true) ?: [];
$scope = (string)($data['scope'] ?? '');
$id    = (int)($data['id'] ?? 0);

try {
    $counts = resetProgress($userId, $scope, $id);
} catch (InvalidArgumentException $e) {
    http_response_code(400);
    echo json_encode(['error' => $e->getMessage()]);
    exit;
}

echo json_encode(['ok' => true, 'reset' => $counts]);