feat(social): follows, favorites, comments, reactions, collections, public profiles

Follow/unfollow users. Recipe favorites. Threaded comments with emoji reactions.
Collections (public/private) with shared member invite. Activity feed.
Public profile pages at /u/[username].

apps/web/app/api/v1/users/me/model-prefs/route.ts

@@ -0,0 +1,42 @@
+import { type NextRequest, NextResponse } from "next/server";
+import { z } from "zod";
+import { requireSession } from "@/lib/api-auth";
+import { db, userModelPrefs, eq } from "@epicure/db";
+
+const Schema = z.object({
+  textProvider: z.string().nullable().optional(),
+  textModel: z.string().nullable().optional(),
+  visionProvider: z.string().nullable().optional(),
+  visionModel: z.string().nullable().optional(),
+  mealPlanProvider: z.string().nullable().optional(),
+  mealPlanModel: z.string().nullable().optional(),
+});
+
+export async function GET() {
+  const { session, response } = await requireSession();
+  if (response) return response;
+
+  const prefs = await db.query.userModelPrefs.findFirst({
+    where: eq(userModelPrefs.userId, session!.user.id),
+  });
+
+  return NextResponse.json(prefs ?? null);
+}
+
+export async function PUT(req: NextRequest) {
+  const { session, response } = await requireSession();
+  if (response) return response;
+
+  const body = Schema.safeParse(await req.json());
+  if (!body.success) return NextResponse.json({ error: "Invalid request" }, { status: 400 });
+
+  await db
+    .insert(userModelPrefs)
+    .values({ id: crypto.randomUUID(), userId: session!.user.id, ...body.data, updatedAt: new Date() })
+    .onConflictDoUpdate({
+      target: userModelPrefs.userId,
+      set: { ...body.data, updatedAt: new Date() },
+    });
+
+  return NextResponse.json({ ok: true });
+}

apps/web/app/api/v1/users/me/nutrition-goals/route.ts

@@ -0,0 +1,45 @@
+import { NextRequest, NextResponse } from "next/server";
+import { db, userNutritionGoals, eq } from "@epicure/db";
+import { requireSession } from "@/lib/api-auth";
+import { z } from "zod";
+
+const PutSchema = z.object({
+  caloriesKcal: z.number().int().min(0).optional(),
+  proteinG: z.number().int().min(0).optional(),
+  carbsG: z.number().int().min(0).optional(),
+  fatG: z.number().int().min(0).optional(),
+});
+
+export async function GET() {
+  const { session, response } = await requireSession();
+  if (response) return response;
+
+  const goals = await db.query.userNutritionGoals.findFirst({
+    where: eq(userNutritionGoals.userId, session!.user.id),
+  });
+
+  return NextResponse.json({ data: goals ?? null });
+}
+
+export async function PUT(req: NextRequest) {
+  const { session, response } = await requireSession();
+  if (response) return response;
+
+  const parsed = PutSchema.safeParse(await req.json());
+  if (!parsed.success) {
+    return NextResponse.json({ error: parsed.error.flatten() }, { status: 400 });
+  }
+
+  const body = parsed.data;
+  const userId = session!.user.id;
+
+  await db
+    .insert(userNutritionGoals)
+    .values({ id: crypto.randomUUID(), userId, ...body, updatedAt: new Date() })
+    .onConflictDoUpdate({
+      target: userNutritionGoals.userId,
+      set: { ...body, updatedAt: new Date() },
+    });
+
+  return NextResponse.json({ ok: true });
+}

apps/web/app/api/v1/users/me/route.ts

@@ -0,0 +1,21 @@
+import { NextResponse } from "next/server";
+import { headers } from "next/headers";
+import { auth } from "@/lib/auth/server";
+import { db, users, eq } from "@epicure/db";
+import { z } from "zod";
+
+const PatchSchema = z.object({
+  name: z.string().min(1).max(100).optional(),
+  locale: z.string().max(10).optional(),
+});
+
+export async function PATCH(req: Request) {
+  const session = await auth.api.getSession({ headers: await headers() });
+  if (!session) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+
+  const body = PatchSchema.safeParse(await req.json());
+  if (!body.success) return NextResponse.json({ error: body.error.flatten() }, { status: 400 });
+
+  await db.update(users).set(body.data).where(eq(users.id, session.user.id));
+  return NextResponse.json({ ok: true });
+}