feat: implement cross-canvas linking, enhanced node type selection, and canvas management

app/server/api/canvas/[id].delete.ts

@@ -8,7 +8,15 @@ export default defineEventHandler(async (event) => {
 
   const canvas = await prisma.canvas.findUnique({ where: { id } })
   if (!canvas) throw createError({ statusCode: 404, message: 'Canvas not found' })
-  if (canvas.ownerId !== user.id) throw createError({ statusCode: 403, message: 'Access denied' })
+  
+  // Allow deletion if owner OR if user is admin
+  const isOwner = canvas.ownerId === user.id
+  const isAdmin = user.role === 'admin'
+
+  if (!isOwner && !isAdmin) {
+    console.warn(`[Delete Access Denied] User ${user.id} (${user.role}) tried to delete canvas ${id} owned by ${canvas.ownerId}`)
+    throw createError({ statusCode: 403, message: 'У вас нет прав на удаление этой карты. Она принадлежит другому пользователю.' })
+  }
 
   await prisma.canvas.delete({ where: { id } })