All files / web/src/app/api/households/[id]/members route.ts

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
import { NextResponse } from 'next/server'
import { withAuth } from '@/lib/auth/withAuth'
import { getHouseholdDetail, addHouseholdMember } from '@/lib/household'
import { db } from '@/db'
import { users } from '@/db/schema'
import { eq } from 'drizzle-orm'

/**
 * POST /api/households/[id]/members
 *
 * Add a member to a household (owner only).
 * Body: { userId: string } or { email: string }
 */
export const POST = withAuth(
  async (request, { userId, params }) => {
    const { id: householdId } = (await params) as { id: string }

    const household = await getHouseholdDetail(householdId)
    if (!household) {
      return NextResponse.json({ error: 'Household not found' }, { status: 404 })
    }

    if (household.ownerId !== userId) {
      return NextResponse.json({ error: 'Only the owner can add members' }, { status: 403 })
    }

    const body = await request.json()

    let targetUserId: string | undefined

    if (body.userId) {
      targetUserId = body.userId
    } else if (body.email) {
      // Look up user by email
      const user = await db.query.users.findFirst({
        where: eq(users.email, body.email),
        columns: { id: true },
      })
      if (!user) {
        return NextResponse.json({ error: 'No user found with that email' }, { status: 404 })
      }
      targetUserId = user.id
    }

    if (!targetUserId) {
      return NextResponse.json({ error: 'userId or email is required' }, { status: 400 })
    }

    const result = await addHouseholdMember(householdId, targetUserId)
    if (!result.success) {
      return NextResponse.json({ error: result.error }, { status: 400 })
    }

    const updated = await getHouseholdDetail(householdId)
    return NextResponse.json({ household: updated }, { status: 201 })
  },
  { role: 'user' }
)