c5e1643d39
- Notification email preferences: every push category (follow, comment, reply, reaction, rating, mention, leftoverExpiring, shoppingList) now has an independent email toggle, plus a Weekly Digest toggle. Previously email sent unconditionally whenever the recipient had one; now gated the same way push already was. The weekly-digest cron route excludes opted-out users. - Admin-only site-wide webhooks (Admin → Webhooks): new signups, support tickets, and reports filed can now fire an HMAC-signed HTTP webhook (Slack/Discord/ops alerting), independent of the existing per-user webhooks (which stay scoped to a user's own recipe/meal-plan/shopping-list events). Signing/delivery logic factored into lib/webhook-delivery.ts and shared by both dispatchers instead of duplicated. - Settings → Features: users can hide Nutrition, Pantry, Meal Plan, Shopping Lists, Collections, or Messages from their own nav. Purely cosmetic — hidden pages stay reachable by direct link, nothing is access-restricted. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
46 lines
1.3 KiB
TypeScript
46 lines
1.3 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { db, userFeaturePrefs } from "@epicure/db";
|
|
import { requireSession } from "@/lib/api-auth";
|
|
import { getFeaturePrefs } from "@/lib/feature-prefs";
|
|
import { z } from "zod";
|
|
|
|
const PutSchema = z.object({
|
|
nutrition: z.boolean().optional(),
|
|
pantry: z.boolean().optional(),
|
|
mealPlan: z.boolean().optional(),
|
|
shoppingLists: z.boolean().optional(),
|
|
collections: z.boolean().optional(),
|
|
messages: z.boolean().optional(),
|
|
});
|
|
|
|
export async function GET() {
|
|
const { session, response } = await requireSession();
|
|
if (response) return response;
|
|
|
|
const prefs = await getFeaturePrefs(session!.user.id);
|
|
return NextResponse.json({ data: prefs });
|
|
}
|
|
|
|
export async function PUT(req: NextRequest) {
|
|
const { session, response } = await requireSession();
|
|
if (response) return response;
|
|
|
|
const parsed = PutSchema.safeParse(await req.json());
|
|
if (!parsed.success) {
|
|
return NextResponse.json({ error: parsed.error.flatten() }, { status: 400 });
|
|
}
|
|
|
|
const body = parsed.data;
|
|
const userId = session!.user.id;
|
|
|
|
await db
|
|
.insert(userFeaturePrefs)
|
|
.values({ id: crypto.randomUUID(), userId, ...body, updatedAt: new Date() })
|
|
.onConflictDoUpdate({
|
|
target: userFeaturePrefs.userId,
|
|
set: { ...body, updatedAt: new Date() },
|
|
});
|
|
|
|
return NextResponse.json({ ok: true });
|
|
}
|