Update features and dependencies

apps/web/app/api/v1/collections/[id]/route.ts

@@ -1,6 +1,6 @@
 import { NextRequest, NextResponse } from "next/server";
 import { z } from "zod";
-import { db, collections, collectionRecipes, recipes, eq, and } from "@epicure/db";
+import { db, collections, collectionRecipes, recipes, eq, and, or, ne } from "@epicure/db";
 import { requireSession } from "@/lib/api-auth";
 
 type Params = { params: Promise<{ id: string }> };
@@ -50,7 +50,12 @@ export async function PUT(req: NextRequest, { params }: Params) {
   }
 
   if (data.addRecipeId) {
-    const recipe = await db.query.recipes.findFirst({ where: eq(recipes.id, data.addRecipeId) });
+    const recipe = await db.query.recipes.findFirst({
+      where: and(
+        eq(recipes.id, data.addRecipeId),
+        or(eq(recipes.authorId, session!.user.id), ne(recipes.visibility, "private"))
+      ),
+    });
     if (recipe) {
       await db.insert(collectionRecipes).values({ collectionId: id, recipeId: data.addRecipeId }).onConflictDoNothing();
     }