All files / web/src/app/api/arcade/rooms/[roomId] route.ts

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
import { NextResponse } from 'next/server'
import {
  deleteRoom,
  getRoomById,
  isRoomCreator,
  touchRoom,
  updateRoom,
} from '@/lib/arcade/room-manager'
import { getRoomMembers } from '@/lib/arcade/room-membership'
import { getActivePlayers } from '@/lib/arcade/player-manager'
import { withAuth } from '@/lib/auth/withAuth'
import { getUserId } from '@/lib/viewer'

/**
 * GET /api/arcade/rooms/:roomId
 * Get room details including members
 */
export const GET = withAuth(async (_request, { params }) => {
  try {
    const { roomId } = (await params) as { roomId: string }
    const userId = await getUserId()

    const room = await getRoomById(roomId)
    if (!room) {
      return NextResponse.json({ error: 'Room not found' }, { status: 404 })
    }

    const members = await getRoomMembers(roomId)
    const canModerate = await isRoomCreator(roomId, userId)

    // Fetch active players for each member
    // This creates a map of userId -> Player[]
    const memberPlayers: Record<string, any[]> = {}
    for (const member of members) {
      const activePlayers = await getActivePlayers(member.userId)
      memberPlayers[member.userId] = activePlayers
    }

    // Update room activity when viewing (keeps active rooms fresh)
    await touchRoom(roomId)

    // Prepare room data - include displayPassword only for room creator
    const roomData = canModerate
      ? room // Creator gets full room data including displayPassword
      : { ...room, displayPassword: undefined } // Others don't see displayPassword

    return NextResponse.json({
      room: roomData,
      members,
      memberPlayers, // Map of userId -> active Player[] for each member
      canModerate,
    })
  } catch (error) {
    console.error('Failed to fetch room:', error)
    return NextResponse.json({ error: 'Failed to fetch room' }, { status: 500 })
  }
})

/**
 * PATCH /api/arcade/rooms/:roomId
 * Update room (creator only)
 * Body:
 *   - name?: string
 *   - status?: 'lobby' | 'playing' | 'finished'
 *
 * Note: For access control (accessMode, password), use PATCH /api/arcade/rooms/:roomId/settings
 */
export const PATCH = withAuth(async (request, { params }) => {
  try {
    const { roomId } = (await params) as { roomId: string }
    const userId = await getUserId()
    const body = await request.json()

    // Check if user is room creator
    const isCreator = await isRoomCreator(roomId, userId)
    if (!isCreator) {
      return NextResponse.json({ error: 'Only room creator can update room' }, { status: 403 })
    }

    // Validate name length if provided
    if (body.name && body.name.length > 50) {
      return NextResponse.json({ error: 'Room name too long (max 50 characters)' }, { status: 400 })
    }

    // Validate status if provided
    if (body.status && !['lobby', 'playing', 'finished'].includes(body.status)) {
      return NextResponse.json({ error: 'Invalid status' }, { status: 400 })
    }

    const updates: {
      name?: string
      status?: 'lobby' | 'playing' | 'finished'
    } = {}

    if (body.name !== undefined) updates.name = body.name
    if (body.status !== undefined) updates.status = body.status

    const room = await updateRoom(roomId, updates)

    if (!room) {
      return NextResponse.json({ error: 'Room not found' }, { status: 404 })
    }

    return NextResponse.json({ room })
  } catch (error) {
    console.error('Failed to update room:', error)
    return NextResponse.json({ error: 'Failed to update room' }, { status: 500 })
  }
})

/**
 * DELETE /api/arcade/rooms/:roomId
 * Delete room (creator only)
 */
export const DELETE = withAuth(async (_request, { params }) => {
  try {
    const { roomId } = (await params) as { roomId: string }
    const userId = await getUserId()

    // Check if user is room creator
    const isCreator = await isRoomCreator(roomId, userId)
    if (!isCreator) {
      return NextResponse.json({ error: 'Only room creator can delete room' }, { status: 403 })
    }

    await deleteRoom(roomId)

    return NextResponse.json({ success: true })
  } catch (error) {
    console.error('Failed to delete room:', error)
    return NextResponse.json({ error: 'Failed to delete room' }, { status: 500 })
  }
})