feat(recipes): full recipe CRUD with photos, print, version history

List, detail, new, edit pages. Server-side pagination, dietary tags, difficulty. Photo upload to S3-compatible storage. Version history. Multi-select grid with bulk delete/visibility. Print view. Delete confirmation dialog.
2026-07-01 08:10:11 +02:00
parent fa2d797918
commit 84d6cfeb07
45 changed files with 5300 additions and 0 deletions
@@ -0,0 +1,102 @@
+import { NextRequest, NextResponse } from "next/server";
+import { z } from "zod";
+import { db, comments, commentReactions, eq, and, count } from "@epicure/db";
+import { requireSession } from "@/lib/api-auth";
+
+const ReactionSchema = z.object({
+  type: z.enum(["like", "love", "laugh", "wow", "sad", "fire"]),
+});
+
+type Params = { params: Promise<{ id: string; commentId: string }> };
+
+export async function GET(req: NextRequest, { params }: Params) {
+  const { commentId } = await params;
+
+  // Verify comment exists
+  const comment = await db.query.comments.findFirst({ where: eq(comments.id, commentId) });
+  if (!comment) {
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+
+  // Get reaction counts grouped by type
+  const rows = await db
+    .select({ type: commentReactions.type, cnt: count() })
+    .from(commentReactions)
+    .where(eq(commentReactions.commentId, commentId))
+    .groupBy(commentReactions.type);
+
+  const counts: Record<string, number> = {};
+  for (const row of rows) {
+    counts[row.type] = row.cnt;
+  }
+
+  // Check for session to return user's reactions
+  const { session } = await requireSession();
+  let userReactions: string[] = [];
+
+  if (session) {
+    const userRows = await db
+      .select({ type: commentReactions.type })
+      .from(commentReactions)
+      .where(and(eq(commentReactions.commentId, commentId), eq(commentReactions.userId, session.user.id)));
+    userReactions = userRows.map((r) => r.type);
+  }
+
+  return NextResponse.json({ counts, userReactions });
+}
+
+export async function POST(req: NextRequest, { params }: Params) {
+  const { session, response } = await requireSession();
+  if (response) return response;
+  const { commentId } = await params;
+
+  // Verify comment exists
+  const comment = await db.query.comments.findFirst({ where: eq(comments.id, commentId) });
+  if (!comment) {
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+
+  const body = await req.json() as unknown;
+  const parsed = ReactionSchema.safeParse(body);
+  if (!parsed.success) return NextResponse.json({ error: "Validation error" }, { status: 400 });
+
+  const { type } = parsed.data;
+  const userId = session!.user.id;
+
+  // Toggle: check if reaction exists
+  const existing = await db.query.commentReactions.findFirst({
+    where: and(
+      eq(commentReactions.commentId, commentId),
+      eq(commentReactions.userId, userId),
+      eq(commentReactions.type, type),
+    ),
+  });
+
+  let added: boolean;
+  if (existing) {
+    await db.delete(commentReactions).where(eq(commentReactions.id, existing.id));
+    added = false;
+  } else {
+    await db.insert(commentReactions).values({
+      id: crypto.randomUUID(),
+      commentId,
+      userId,
+      type,
+    });
+    added = true;
+  }
+
+  // Return updated counts
+  const rows = await db
+    .select({ type: commentReactions.type, cnt: count() })
+    .from(commentReactions)
+    .where(eq(commentReactions.commentId, commentId))
+    .groupBy(commentReactions.type);
+
+  const counts: Record<string, number> = {};
+  for (const row of rows) {
+    counts[row.type] = row.cnt;
+  }
+
+  return NextResponse.json({ counts, added });
+}
@@ -0,0 +1,82 @@
+import { NextRequest, NextResponse } from "next/server";
+import { z } from "zod";
+import { db, recipes, comments, users, eq, and } from "@epicure/db";
+import { requireSession } from "@/lib/api-auth";
+import { dispatchWebhook } from "@/lib/webhooks";
+import { sendPushNotification } from "@/lib/push";
+
+const Schema = z.object({
+  content: z.string().min(1).max(5000),
+  parentId: z.string().optional(),
+});
+
+type Params = { params: Promise<{ id: string }> };
+
+export async function GET(_req: NextRequest, { params }: Params) {
+  const { id } = await params;
+  const recipe = await db.query.recipes.findFirst({ where: eq(recipes.id, id) });
+  if (!recipe || recipe.visibility === "private") {
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+
+  const rows = await db
+    .select({
+      id: comments.id,
+      content: comments.content,
+      parentId: comments.parentId,
+      createdAt: comments.createdAt,
+      updatedAt: comments.updatedAt,
+      userId: comments.userId,
+      userName: users.name,
+      userUsername: users.username,
+      userAvatarUrl: users.avatarUrl,
+    })
+    .from(comments)
+    .innerJoin(users, eq(comments.userId, users.id))
+    .where(eq(comments.recipeId, id))
+    .orderBy(comments.createdAt);
+
+  return NextResponse.json(rows);
+}
+
+export async function POST(req: NextRequest, { params }: Params) {
+  const { session, response } = await requireSession();
+  if (response) return response;
+  const { id } = await params;
+
+  const recipe = await db.query.recipes.findFirst({ where: eq(recipes.id, id) });
+  if (!recipe || (recipe.visibility === "private" && recipe.authorId !== session!.user.id)) {
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+
+  const body = await req.json() as unknown;
+  const parsed = Schema.safeParse(body);
+  if (!parsed.success) return NextResponse.json({ error: "Validation error" }, { status: 400 });
+
+  if (parsed.data.parentId) {
+    const parent = await db.query.comments.findFirst({
+      where: and(eq(comments.id, parsed.data.parentId), eq(comments.recipeId, id)),
+    });
+    if (!parent) return NextResponse.json({ error: "Parent comment not found" }, { status: 404 });
+  }
+
+  const commentId = crypto.randomUUID();
+  await db.insert(comments).values({
+    id: commentId,
+    recipeId: id,
+    userId: session!.user.id,
+    parentId: parsed.data.parentId,
+    content: parsed.data.content,
+  });
+
+  // Dispatch to recipe author's webhooks (not to the commenter themselves)
+  if (recipe.authorId !== session!.user.id) {
+    void dispatchWebhook(recipe.authorId, "comment.added", { commentId, recipeId: id, recipeTitle: recipe.title });
+    void sendPushNotification(recipe.authorId, {
+      title: "New comment on your recipe",
+      body: `${session!.user.name} commented on "${recipe.title}"`,
+      url: `/recipes/${id}`,
+    });
+  }
+  return NextResponse.json({ id: commentId }, { status: 201 });
+}