All files / apps/web/src/handlers/receipts remove.ts

100% Statements 10/10
100% Branches 4/4
100% Functions 2/2
100% Lines 10/10

Press n or j to go to the next uncovered block, b, p or k for the previous block.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50            6x                       3x 3x           3x 1x         2x 1x         1x 1x         1x            
import { TRPCError } from "@trpc/server";
import { z } from "zod";
 
import { authProcedure } from "~web/handlers/trpc";
import { receiptIdSchema } from "~web/handlers/validation";
 
export const procedure = authProcedure
	.meta({
		title: "Remove receipt",
		description:
			"Removes a receipt owned by the current  user, unlinking any debts that reference it.",
	})
	.input(
		z.strictObject({
			id: receiptIdSchema,
		}),
	)
	.mutation(async ({ input, ctx }) => {
		const { database } = ctx;
		const receipt = await database
			.selectFrom("receipts")
			.select("ownerUserId")
			.where("id", "=", input.id)
			.limit(1)
			.executeTakeFirst();
		if (!receipt) {
			throw new TRPCError({
				code: "NOT_FOUND",
				message: `No receipt found by id "${input.id}".`,
			});
		}
		if (receipt.ownerUserId !== ctx.auth.userId) {
			throw new TRPCError({
				code: "FORBIDDEN",
				message: `Receipt "${input.id}" is not owned by "${ctx.auth.email}".`,
			});
		}
		await database.transaction().execute(async (tx) => {
			await tx
				.updateTable("debts")
				.where("receiptId", "=", input.id)
				.set({ receiptId: null })
				.execute();
			await tx
				.deleteFrom("receipts")
				.where("id", "=", input.id)
				.executeTakeFirst();
		});
	});