feat: migrate Canvas and Groups API to Prisma ORM

app/server/api/canvas/[id].put.ts

@@ -1,24 +1,28 @@
 import { requireAuth } from '~/server/utils/auth'
-import { canvases } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
-  requireAuth(event)
+  const user = requireAuth(event)
   const id = getRouterParam(event, 'id')
+  if (!id) throw createError({ statusCode: 400, message: 'Canvas ID is required' })
+
   const body = await readBody(event)
 
-  const existing = canvases.get(id || '')
-  if (!existing) {
-    throw createError({ statusCode: 404, message: 'Canvas not found' })
-  }
+  const existing = await prisma.canvas.findUnique({ where: { id } })
+  if (!existing) throw createError({ statusCode: 404, message: 'Canvas not found' })
+  if (existing.ownerId !== user.id) throw createError({ statusCode: 403, message: 'Access denied' })
 
-  const updated = {
-    ...existing,
-    ...body,
-    id: existing.id,
-    updatedAt: new Date().toISOString()
-  }
+  const { name, nodes, edges, isPublic, groupId } = body
+  const canvas = await prisma.canvas.update({
+    where: { id },
+    data: {
+      ...(name !== undefined && { name }),
+      ...(nodes !== undefined && { nodes }),
+      ...(edges !== undefined && { edges }),
+      ...(isPublic !== undefined && { isPublic }),
+      ...(groupId !== undefined && { groupId: groupId || null })
+    }
+  })
 
-  canvases.set(id || '', updated)
-
-  return { canvas: updated }
-})  
+  return { canvas }
+})