feat: migrate Canvas and Groups API to Prisma ORM

app/server/api/canvas/[id].get.ts

@@ -1,61 +1,24 @@
 import { requireAuth } from '~/server/utils/auth'
-import { canvases, userGroups } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
   const id = getRouterParam(event, 'id')
+  if (!id) throw createError({ statusCode: 400, message: 'Canvas ID is required' })
 
-  if (!id) {
-    throw createError({ statusCode: 400, message: 'Canvas ID is required' })
-  }
+  const canvas = await prisma.canvas.findUnique({ where: { id } })
+  if (!canvas) throw createError({ statusCode: 404, message: 'Canvas not found' })
 
-  const canvas = canvases.get(id)
-  if (!canvas) {
-    throw createError({ statusCode: 404, message: 'Canvas not found' })
-  }
+  if (canvas.isPublic) return canvas
 
-  // Check if canvas is public
-  if (canvas.isPublic) {
-    return {
-      id: canvas.id,
-      name: canvas.name,
-      nodes: canvas.nodes,
-      edges: canvas.edges,
-      isPublic: true,
-      ownerId: canvas.ownerId
-    }
-  }
-
-  // For private canvases, require authentication and check permissions
   const user = requireAuth(event)
 
-  // Check if user owns the canvas
-  if (canvas.ownerId === user.id) {
-    return {
-      id: canvas.id,
-      name: canvas.name,
-      nodes: canvas.nodes,
-      edges: canvas.edges,
-      isPublic: false,
-      ownerId: canvas.ownerId
-    }
-  }
+  if (canvas.ownerId === user.id) return canvas
 
-  // Check if user has access through group membership
   if (canvas.groupId) {
-    const membership = Array.from(userGroups.values()).find(
-      m => m.userId === user.id && m.groupId === canvas.groupId
-    )
-    if (membership) {
-      return {
-        id: canvas.id,
-        name: canvas.name,
-        nodes: canvas.nodes,
-        edges: canvas.edges,
-        isPublic: false,
-        ownerId: canvas.ownerId,
-        groupId: canvas.groupId
-      }
-    }
+    const membership = await prisma.groupMember.findUnique({
+      where: { userId_groupId: { userId: user.id, groupId: canvas.groupId } }
+    })
+    if (membership) return canvas
   }
 
   throw createError({ statusCode: 403, message: 'Access denied' })