Arnaud
9c545a5bb3
- Private accounts: users.isPrivate hides a user from search and their recipes from search/trending/for-you discovery surfaces (follow-aware where the route already has session context, blanket exclusion where it doesn't); existing followers and direct links are unaffected, no follow-request approval flow was built (explicit scope limit) - Merged /people into the Explore tab (tab=people query param); the old standalone route now redirects there - "Get Ideas" vs "Surprise Me" were doing the same empty-prompt call; Surprise Me now injects a real random constraint (5-ingredient, one-pot, etc.), matching the existing pattern in the AI recipe-generate dialog - Meal-plan day cells now link to their recipe (was dead text) and gained a one-click "mark as cooked" action - Theme toggle is now a real three-way light/dark/system control instead of a binary flip - Nutrition goals form had zero i18n wiring; fully localized now New migration 0027 (users.is_private) generated, left unapplied like the others. Verified with typecheck, lint, and a clean --no-cache docker build. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
47 lines
1.5 KiB
TypeScript
47 lines
1.5 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { db, users, userBlocks, eq, and, or, ne, ilike, isNotNull } from "@epicure/db";
|
|
import { requireSession } from "@/lib/api-auth";
|
|
|
|
export async function GET(req: NextRequest) {
|
|
const { session, response } = await requireSession();
|
|
if (response) return response;
|
|
|
|
const q = req.nextUrl.searchParams.get("q")?.trim().slice(0, 50) ?? "";
|
|
if (q.length < 2) return NextResponse.json({ users: [] });
|
|
|
|
const blocked = await db
|
|
.select({ blockedId: userBlocks.blockedId })
|
|
.from(userBlocks)
|
|
.where(eq(userBlocks.blockerId, session!.user.id));
|
|
const blockedByMe = new Set(blocked.map((b) => b.blockedId));
|
|
|
|
const blockedMe = await db
|
|
.select({ blockerId: userBlocks.blockerId })
|
|
.from(userBlocks)
|
|
.where(eq(userBlocks.blockedId, session!.user.id));
|
|
const haveBlockedMe = new Set(blockedMe.map((b) => b.blockerId));
|
|
|
|
const rows = await db
|
|
.select({
|
|
id: users.id,
|
|
name: users.name,
|
|
username: users.username,
|
|
avatarUrl: users.avatarUrl,
|
|
bio: users.bio,
|
|
})
|
|
.from(users)
|
|
.where(
|
|
and(
|
|
isNotNull(users.username),
|
|
ne(users.id, session!.user.id),
|
|
eq(users.isPrivate, false),
|
|
or(ilike(users.name, `%${q}%`), ilike(users.username, `%${q}%`))
|
|
)
|
|
)
|
|
.limit(20);
|
|
|
|
const filtered = rows.filter((u) => !blockedByMe.has(u.id) && !haveBlockedMe.has(u.id));
|
|
|
|
return NextResponse.json({ users: filtered });
|
|
}
|