feat: assign trip members to packing list categories — closes #71

server/src/db/migrations.ts

@@ -220,6 +220,15 @@ function runMigrations(db: Database.Database): void {
       try { db.exec('ALTER TABLE users ADD COLUMN mfa_enabled INTEGER DEFAULT 0'); } catch {}
       try { db.exec('ALTER TABLE users ADD COLUMN mfa_secret TEXT'); } catch {}
     },
+    () => {
+      db.exec(`CREATE TABLE IF NOT EXISTS packing_category_assignees (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        trip_id INTEGER NOT NULL REFERENCES trips(id) ON DELETE CASCADE,
+        category_name TEXT NOT NULL,
+        user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        UNIQUE(trip_id, category_name, user_id)
+      )`);
+    },
   ];
 
   if (currentVersion < migrations.length) {

server/src/routes/packing.ts

@@ -91,6 +91,58 @@ router.delete('/:id', authenticate, (req: Request, res: Response) => {
   broadcast(tripId, 'packing:deleted', { itemId: Number(id) }, req.headers['x-socket-id'] as string);
 });
 
+// ── Category assignees ──────────────────────────────────────────────────────
+
+router.get('/category-assignees', authenticate, (req: Request, res: Response) => {
+  const authReq = req as AuthRequest;
+  const { tripId } = req.params;
+  const trip = verifyTripOwnership(tripId, authReq.user.id);
+  if (!trip) return res.status(404).json({ error: 'Trip not found' });
+
+  const rows = db.prepare(`
+    SELECT pca.category_name, pca.user_id, u.username, u.avatar
+    FROM packing_category_assignees pca
+    JOIN users u ON pca.user_id = u.id
+    WHERE pca.trip_id = ?
+  `).all(tripId);
+
+  // Group by category
+  const assignees: Record<string, { user_id: number; username: string; avatar: string | null }[]> = {};
+  for (const row of rows as any[]) {
+    if (!assignees[row.category_name]) assignees[row.category_name] = [];
+    assignees[row.category_name].push({ user_id: row.user_id, username: row.username, avatar: row.avatar });
+  }
+
+  res.json({ assignees });
+});
+
+router.put('/category-assignees/:categoryName', authenticate, (req: Request, res: Response) => {
+  const authReq = req as AuthRequest;
+  const { tripId, categoryName } = req.params;
+  const { user_ids } = req.body;
+
+  const trip = verifyTripOwnership(tripId, authReq.user.id);
+  if (!trip) return res.status(404).json({ error: 'Trip not found' });
+
+  const cat = decodeURIComponent(categoryName);
+  db.prepare('DELETE FROM packing_category_assignees WHERE trip_id = ? AND category_name = ?').run(tripId, cat);
+
+  if (Array.isArray(user_ids) && user_ids.length > 0) {
+    const insert = db.prepare('INSERT OR IGNORE INTO packing_category_assignees (trip_id, category_name, user_id) VALUES (?, ?, ?)');
+    for (const uid of user_ids) insert.run(tripId, cat, uid);
+  }
+
+  const rows = db.prepare(`
+    SELECT pca.user_id, u.username, u.avatar
+    FROM packing_category_assignees pca
+    JOIN users u ON pca.user_id = u.id
+    WHERE pca.trip_id = ? AND pca.category_name = ?
+  `).all(tripId, cat);
+
+  res.json({ assignees: rows });
+  broadcast(tripId, 'packing:assignees', { category: cat, assignees: rows }, req.headers['x-socket-id'] as string);
+});
+
 router.put('/reorder', authenticate, (req: Request, res: Response) => {
   const authReq = req as AuthRequest;
   const { tripId } = req.params;