feat(recipes): full recipe CRUD with photos, print, version history

List, detail, new, edit pages. Server-side pagination, dietary tags, difficulty. Photo upload to S3-compatible storage. Version history. Multi-select grid with bulk delete/visibility. Print view. Delete confirmation dialog.
2026-07-01 08:10:11 +02:00
parent fa2d797918
commit 84d6cfeb07
45 changed files with 5300 additions and 0 deletions
@@ -0,0 +1,49 @@
+import { NextRequest, NextResponse } from "next/server";
+import { z } from "zod";
+import { db, recipes, ratings, eq, and } from "@epicure/db";
+import { requireSession } from "@/lib/api-auth";
+
+const Schema = z.object({
+  score: z.number().int().min(1).max(5),
+  reviewText: z.string().max(2000).optional(),
+});
+
+type Params = { params: Promise<{ id: string }> };
+
+export async function POST(req: NextRequest, { params }: Params) {
+  const { session, response } = await requireSession();
+  if (response) return response;
+  const { id } = await params;
+
+  const recipe = await db.query.recipes.findFirst({ where: eq(recipes.id, id) });
+  if (!recipe || (recipe.visibility === "private" && recipe.authorId !== session!.user.id)) {
+    return NextResponse.json({ error: "Not found" }, { status: 404 });
+  }
+  if (recipe.authorId === session!.user.id) {
+    return NextResponse.json({ error: "Cannot rate your own recipe" }, { status: 400 });
+  }
+
+  const body = await req.json() as unknown;
+  const parsed = Schema.safeParse(body);
+  if (!parsed.success) return NextResponse.json({ error: "Validation error" }, { status: 400 });
+
+  const existing = await db.query.ratings.findFirst({
+    where: and(eq(ratings.recipeId, id), eq(ratings.userId, session!.user.id)),
+  });
+
+  if (existing) {
+    await db.update(ratings)
+      .set({ score: parsed.data.score, reviewText: parsed.data.reviewText, updatedAt: new Date() })
+      .where(eq(ratings.id, existing.id));
+    return NextResponse.json({ updated: true });
+  }
+
+  await db.insert(ratings).values({
+    id: crypto.randomUUID(),
+    recipeId: id,
+    userId: session!.user.id,
+    score: parsed.data.score,
+    reviewText: parsed.data.reviewText,
+  });
+  return NextResponse.json({ created: true }, { status: 201 });
+}