spb/toveli

1import { NextRequest, NextResponse } from "next/server";2import { z } from "zod";3import { and, eq } from "drizzle-orm";4import { db } from "@/db/client";5import { savedSearches } from "@/db/schema";6import { assertSameOrigin, requireUser } from "@/lib/auth/session";7import { handle, parseBody } from "@/lib/api";8export const dynamic = "force-dynamic";9type P = { params: Promise<{ id: string }> };10const Patch = z.object({ label: z.string().trim().min(1).max(120).optional(), alertEnabled: z.boolean().optional(), alertFrequency: z.enum(["INSTANT", "DAILY", "WEEKLY", "OFF"]).optional() });11export async function PATCH(req: NextRequest, { params }: P) { try { await assertSameOrigin(); const u = await requireUser(); const { id } = await params; const b = await parseBody(req, Patch); await db().update(savedSearches).set(b).where(and(eq(savedSearches.id, id), eq(savedSearches.userId, u.id))); return NextResponse.json({ ok: true }); } catch (e) { return handle(e); } }12export async function DELETE(_req: NextRequest, { params }: P) { try { await assertSameOrigin(); const u = await requireUser(); const { id } = await params; await db().delete(savedSearches).where(and(eq(savedSearches.id, id), eq(savedSearches.userId, u.id))); return NextResponse.json({ ok: true }); } catch (e) { return handle(e); } }13