feat: migrate Canvas and Groups API to Prisma ORM

app/server/api/groups/[id].delete.ts

@@ -1,20 +1,17 @@
 import { requireAuth } from '~/server/utils/auth'
-import { groups, userGroups } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
   const user = requireAuth(event)
   const groupId = getRouterParam(event, 'id')!
 
-  const group = groups.get(groupId)
+  const group = await prisma.group.findUnique({ where: { id: groupId } })
   if (!group) throw createError({ statusCode: 404, message: 'Group not found' })
   if (group.ownerId !== user.id && user.role !== 'admin') {
     throw createError({ statusCode: 403, message: 'Only owner can delete group' })
   }
 
-  groups.delete(groupId)
-  for (const [key] of userGroups) {
-    if (key.endsWith(`-${groupId}`)) userGroups.delete(key)
-  }
+  await prisma.group.delete({ where: { id: groupId } })
 
   return { success: true }
 })

app/server/api/groups/[id]/join.post.ts

@@ -1,17 +1,22 @@
 import { requireAuth } from '~/server/utils/auth'
-import { groups, userGroups } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
   const user = requireAuth(event)
   const groupId = getRouterParam(event, 'id')!
 
-  const group = groups.get(groupId)
+  const group = await prisma.group.findUnique({ where: { id: groupId } })
   if (!group) throw createError({ statusCode: 404, message: 'Group not found' })
   if (!group.isPublic) throw createError({ statusCode: 403, message: 'Group is private' })
 
-  const key = `${user.id}-${groupId}`
-  if (userGroups.has(key)) return { message: 'Already a member' }
+  const existing = await prisma.groupMember.findUnique({
+    where: { userId_groupId: { userId: user.id, groupId } }
+  })
+  if (existing) return { message: 'Already a member' }
+
+  await prisma.groupMember.create({
+    data: { userId: user.id, groupId, role: 'member' }
+  })
 
-  userGroups.set(key, { userId: user.id, groupId, role: 'member', joinedAt: new Date().toISOString() })
   return { success: true, message: `Joined group "${group.name}"` }
 })

app/server/api/groups/[id]/leave.post.ts

@@ -1,17 +1,20 @@
 import { requireAuth } from '~/server/utils/auth'
-import { groups, userGroups } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
   const user = requireAuth(event)
   const groupId = getRouterParam(event, 'id')!
 
-  const group = groups.get(groupId)
+  const group = await prisma.group.findUnique({ where: { id: groupId } })
   if (!group) throw createError({ statusCode: 404, message: 'Group not found' })
   if (group.ownerId === user.id) throw createError({ statusCode: 400, message: 'Owner cannot leave group. Delete it instead.' })
 
-  const key = `${user.id}-${groupId}`
-  if (!userGroups.has(key)) throw createError({ statusCode: 400, message: 'Not a member' })
+  const membership = await prisma.groupMember.findUnique({
+    where: { userId_groupId: { userId: user.id, groupId } }
+  })
+  if (!membership) throw createError({ statusCode: 400, message: 'Not a member' })
+
+  await prisma.groupMember.delete({ where: { id: membership.id } })
 
-  userGroups.delete(key)
   return { success: true, message: `Left group "${group.name}"` }
 })

app/server/api/groups/index.get.ts

@@ -1,8 +1,30 @@
 import { requireAuth } from '~/server/utils/auth'
-import { groups } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
-  requireAuth(event)
-  const allGroups = Array.from(groups.values()).filter(g => g.isPublic)
-  return { groups: allGroups }
+  const user = requireAuth(event)
+
+  const allGroups = await prisma.group.findMany({
+    where: { isPublic: true },
+    include: {
+      members: { include: { user: { select: { id: true, username: true } } } },
+      _count: { select: { members: true, canvases: true } }
+    },
+    orderBy: { createdAt: 'desc' }
+  })
+
+  return {
+    groups: allGroups.map(g => ({
+      id: g.id,
+      name: g.name,
+      description: g.description,
+      isPublic: g.isPublic,
+      ownerId: g.ownerId,
+      createdAt: g.createdAt,
+      updatedAt: g.updatedAt,
+      memberCount: g._count.members,
+      canvasCount: g._count.canvases,
+      isMember: g.members.some(m => m.userId === user.id)
+    }))
+  }
 })

app/server/api/groups/index.post.ts

@@ -1,5 +1,5 @@
 import { requireAuth } from '~/server/utils/auth'
-import { groups, userGroups } from '~/server/utils/db'
+import { prisma } from '~/server/utils/prisma'
 
 export default defineEventHandler(async (event) => {
   const user = requireAuth(event)
@@ -10,17 +10,19 @@ export default defineEventHandler(async (event) => {
     throw createError({ statusCode: 400, message: 'Group name is required' })
   }
 
-  const id = `group-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`
-  const now = new Date().toISOString()
-
-  const group = { id, name: name.trim(), description, isPublic, createdAt: now, updatedAt: now, ownerId: user.id }
-  groups.set(id, group)
-
-  userGroups.set(`${user.id}-${id}`, {
-    userId: user.id,
-    groupId: id,
-    role: 'admin',
-    joinedAt: now
+  const group = await prisma.group.create({
+    data: {
+      name: name.trim(),
+      description,
+      isPublic,
+      ownerId: user.id,
+      members: {
+        create: {
+          userId: user.id,
+          role: 'admin'
+        }
+      }
+    }
   })
 
   return { group }