feat: 盲盒房间支持删除（创建者）和退出（成员）

- DELETE /api/blindbox/room/[code] 根据身份区分行为
- 房间页底部两步确认按钮，防止误操作
- 更新 ROADMAP：该功能从 P3 提升至 P1，移除低价值项

src/app/api/blindbox/room/[code]/route.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import { prisma } from "@/lib/prisma";
 import { errorResponse, getRoomByCode } from "@/lib/blindbox";
 
 export async function GET(
@@ -28,3 +29,35 @@ export async function GET(
     return errorResponse("获取房间信息失败", 500);
   }
 }
+
+export async function DELETE(
+  req: NextRequest,
+  { params }: { params: Promise<{ code: string }> },
+) {
+  try {
+    const { code } = await params;
+    const { userId } = await req.json();
+
+    if (!userId) return errorResponse("缺少用户 ID", 400);
+
+    const room = await prisma.blindBoxRoom.findUnique({
+      where: { code: code.toUpperCase() },
+    });
+    if (!room) return errorResponse("房间不存在", 404);
+
+    if (room.creatorId === userId) {
+      await prisma.blindBoxRoom.delete({ where: { id: room.id } });
+      return NextResponse.json({ action: "deleted" });
+    }
+
+    const membership = await prisma.blindBoxMember.findUnique({
+      where: { roomId_userId: { roomId: room.id, userId } },
+    });
+    if (!membership) return errorResponse("你不是该房间成员", 403);
+
+    await prisma.blindBoxMember.delete({ where: { id: membership.id } });
+    return NextResponse.json({ action: "left" });
+  } catch {
+    return errorResponse("操作失败", 500);
+  }
+}