feat: Add job blacklist (hide companies/roles you don't want to see)

backend/app/api/routes/blacklist.py

@@ -0,0 +1,84 @@
+"""
+Job blacklist - hide specific companies or role keywords from search results.
+"""
+import uuid
+from datetime import datetime
+
+from fastapi import APIRouter, HTTPException, status
+from pydantic import BaseModel
+from sqlalchemy import DateTime, String, func, select
+from sqlalchemy.dialects.postgresql import UUID as PGUUID
+from sqlalchemy.orm import Mapped, mapped_column
+
+from app.api.deps import CurrentUser, DBSession
+from app.core.database import Base
+
+router = APIRouter(prefix="/blacklist", tags=["blacklist"])
+
+
+class BlacklistEntry(Base):
+    """Companies or keywords user wants to hide from results."""
+    __tablename__ = "blacklist_entries"
+
+    id: Mapped[uuid.UUID] = mapped_column(PGUUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
+    user_id: Mapped[uuid.UUID] = mapped_column(PGUUID(as_uuid=True), nullable=False, index=True)
+    entry_type: Mapped[str] = mapped_column(String(20), nullable=False)  # company, keyword, domain
+    value: Mapped[str] = mapped_column(String(256), nullable=False)
+    reason: Mapped[str | None] = mapped_column(String(256), nullable=True)
+    created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
+
+
+class BlacklistCreate(BaseModel):
+    entry_type: str  # company, keyword, domain
+    value: str
+    reason: str | None = None
+
+
+class BlacklistResponse(BaseModel):
+    id: str
+    entry_type: str
+    value: str
+    reason: str | None
+    created_at: datetime
+
+    class Config:
+        from_attributes = True
+
+
+@router.get("", response_model=list[BlacklistResponse])
+async def list_blacklist(db: DBSession, user: CurrentUser):
+    """Get user's blacklist entries."""
+    result = await db.execute(
+        select(BlacklistEntry).where(BlacklistEntry.user_id == user.id).order_by(BlacklistEntry.created_at.desc())
+    )
+    return [
+        BlacklistResponse(id=str(e.id), entry_type=e.entry_type, value=e.value, reason=e.reason, created_at=e.created_at)
+        for e in result.scalars().all()
+    ]
+
+
+@router.post("", response_model=BlacklistResponse, status_code=status.HTTP_201_CREATED)
+async def add_to_blacklist(data: BlacklistCreate, db: DBSession, user: CurrentUser):
+    """Add a company, keyword, or domain to blacklist."""
+    if data.entry_type not in ("company", "keyword", "domain"):
+        raise HTTPException(status_code=400, detail="entry_type must be: company, keyword, or domain")
+
+    entry = BlacklistEntry(
+        user_id=user.id, entry_type=data.entry_type, value=data.value.strip(), reason=data.reason
+    )
+    db.add(entry)
+    await db.flush()
+    await db.refresh(entry)
+    return BlacklistResponse(id=str(entry.id), entry_type=entry.entry_type, value=entry.value, reason=entry.reason, created_at=entry.created_at)
+
+
+@router.delete("/{entry_id}", status_code=status.HTTP_204_NO_CONTENT)
+async def remove_from_blacklist(entry_id: uuid.UUID, db: DBSession, user: CurrentUser):
+    """Remove an entry from blacklist."""
+    result = await db.execute(
+        select(BlacklistEntry).where(BlacklistEntry.id == entry_id, BlacklistEntry.user_id == user.id)
+    )
+    entry = result.scalar_one_or_none()
+    if not entry:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Entry not found")
+    await db.delete(entry)