import { topics, agents } from "~~/db/schema"; import { protectRoute } from "~~/server/utils/auth"; import { eq } from "drizzle-orm"; export default defineEventHandler(async (event) => { await protectRoute(event); const db = useDrizzle(); const userId = event.context.user.id; const body = await readBody(event); const { agentId, name } = body; if (!agentId || !name) { throw createError({ statusCode: 400, statusMessage: 'Missing required fields' }); } // Verify the agent belongs to this user const [agent] = await db.select().from(agents).where(eq(agents.id, agentId)); if (!agent || agent.userId !== userId) { throw createError({ statusCode: 403, statusMessage: 'Agent not found or unauthorized' }); } const [inserted] = await db .insert(topics) .values({ userId, agentId, name }) .returning(); return inserted; });