Software: Apache. PHP/8.1.30 

uname -a: Linux server1.tuhinhossain.com 5.15.0-163-generic #173-Ubuntu SMP Tue Oct 14 17:51:00 UTC
2025 x86_64 

uid=1002(picotech) gid=1003(picotech) groups=1003(picotech),0(root)  

Safe-mode: OFF (not secure)

/home/picotech/domains/rentals.picotech.app/public_html/server/routes/   drwxr-xr-x
Free 23.57 GB of 117.98 GB (19.98%)
                            Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Self remove    Logout    

Viewing file:     room.js (4.28 KB)      -rw-r--r--

import express from 'express';
import { Floor, Building, Room, Bed, Renter, Activity, RentPayment } from '../models/index.js';
import { auth, authorize } from '../middleware/auth.js';
import { roomValidators } from '../middleware/validators.js';

const router = express.Router();

// Create a room
router.post('/', auth, authorize(['manage']), roomValidators.create, async (req, res) => {
  try {

    const { building_id, floor_id } = req.body;
    const building = await Building.findOne({ where: { id: building_id } });
    const floor = await Floor.findOne({ where: { id: floor_id } });
    if (!building) {
      return res.status(404).json({ error: 'Building not found' });
    }
    if (!floor) {
      return res.status(404).json({ error: 'Floor not found' });
    }

    const existingRooms = await Room.count({ where: { building_id } });
    if (existingRooms >= building.total_rooms) {
      return res.status(400).json({ error: `No more rooms allowed in Building.` });
    }
    const existingRoomsByFloor = await Room.count({ where: { building_id, floor_id } });
    if (existingRoomsByFloor >= floor.total_rooms) {
      return res.status(400).json({ error: `No more rooms allowed in Floor.` });
    }

    const room = await Room.create(req.body);
    const data = {
      model_id: room.id,
      model_name: 'Room',
      description: `New room #${room.room_number} has been created`,
    };
    const activity = await Activity.create(data);
    res.status(201).json(room);
  } catch (err) {
    console.error('Create room error:', err);
    res.status(500).json({ error: 'Failed to create room' });
  }
});

// Get all rooms by floor ID
router.get('/', async (req, res) => {

  try {
    const rooms = await Room.findAll({
      include: [
        {
          model: Building,
          as: 'building',
        },
        {
          model: Floor,
          as: 'floor',
        },
        {
          model: Bed,
          as: 'beds',
          include: [
            {
              model: Renter,
              as: 'renter',
              required: false
            }
          ]
        }
      ],
      order: [['created_at', 'DESC']]
    });

    res.json(rooms);
  } catch (err) {
    console.error('Fetch rooms error:', err);
    res.status(500).json({ error: 'Failed to fetch rooms' });
  }
});

// Get a single room by ID
router.get('/:id', auth, async (req, res) => {
  try {
    const room = await Room.findByPk(req.params.id, {
      include: [
        {
          model: Building,
          as: 'building',
        },
        {
          model: Floor,
          as: 'floor',
        },
        {
          model: Renter,
          as: 'renters',
          include: [
            {
              model: RentPayment,
              as: 'payments',
            },
          ]
        }
      ],
    });
    if (!room) {
      return res.status(404).json({ message: 'Room not found' });
    }
    res.json(room);
  } catch (err) {
    console.error('Get room error:', err);
    res.status(500).json({ message: 'Server error' });
  }
});

// Update a room
router.put('/:id', auth, authorize(['manage']), roomValidators.update, async (req, res) => {
  try {
    const room = await Room.findByPk(req.params.id);

    if (!room) {
      return res.status(404).json({ message: 'Room not found' });
    }

    await room.update(req.body);
    const data = {
      model_id: room.id,
      model_name: 'Room',
      description: `Room #${room.room_number} has been updated`,
    };
    const activity = await Activity.create(data);
    res.json(room);
  } catch (err) {
    console.error('Update room error:', err);
    res.status(500).json({ message: 'Failed to update room' });
  }
});

// Delete a room
router.delete('/:id', auth, authorize(['delete']), async (req, res) => {
  try {
    const room = await Room.findByPk(req.params.id);

    if (!room) {
      return res.status(404).json({ message: 'Room not found' });
    }
    const data = {
      model_id: room.id,
      model_name: 'Room',
      description: `Room #${room.room_number} has been deleted`,
    };
    const activity = await Activity.create(data);
    await room.destroy();
    res.json({ message: 'Room deleted successfully' });
  } catch (err) {
    console.error('Delete room error:', err);
    res.status(500).json({ message: 'Failed to delete room' });
  }
});

export default router;