feat: uv config other feats

- add uv configuration for the backend
- update frontend to make auth work
- add new auth endpoints
- add bookmars feat
- add reader feat

backend/apps/annotations/views.py

@@ -16,14 +16,14 @@ from apps.annotations.serializers import (
 
 
 class BookmarkViewSet(viewsets.ModelViewSet):
-    """CRUD for user bookmarks. Users can only manage their own bookmarks."""
+    """CRUD for user ebook markers (passage anchors + optional thoughts)."""
 
     permission_classes = [IsAuthenticated, IsOwner]
     filter_backends = [DjangoFilterBackend, SearchFilter, OrderingFilter]
-    filterset_fields = ["book"]
-    search_fields = ["location_text"]
-    ordering_fields = ["created_at", "page"]
-    ordering = ["-created_at"]
+    filterset_fields = ["ebook"]
+    search_fields = ["location_text", "content", "chapter_title"]
+    ordering_fields = ["chapter_index", "epub_cfi", "created_at"]
+    ordering = ["chapter_index", "epub_cfi"]
 
     def get_serializer_class(self):
         if self.action == "create":
@@ -31,16 +31,13 @@ class BookmarkViewSet(viewsets.ModelViewSet):
         return BookmarkSerializer
 
     def get_queryset(self):
-        return Bookmark.objects.filter(user=self.request.user).select_related(
-            "book"
-        )
+        return Bookmark.objects.filter(user=self.request.user).select_related("ebook")
 
     def perform_create(self, serializer):
         serializer.save(user=self.request.user)
 
     @action(detail=False, methods=["delete"], url_path="batch-delete")
     def batch_delete(self, request):
-        """Delete multiple bookmarks by id list."""
         ids = request.data.get("ids", [])
         if not ids:
             return Response(
@@ -49,13 +46,11 @@ class BookmarkViewSet(viewsets.ModelViewSet):
         deleted, _ = Bookmark.objects.filter(
             id__in=ids, user=request.user
         ).delete()
-        return Response(
-            {"deleted": deleted}, status=status.HTTP_200_OK
-        )
+        return Response({"deleted": deleted}, status=status.HTTP_200_OK)
 
 
 class NoteViewSet(viewsets.ModelViewSet):
-    """CRUD for user notes. Users can only manage their own notes."""
+    """Legacy notes API (catalog Book FK)."""
 
     permission_classes = [IsAuthenticated, IsOwner]
     filter_backends = [DjangoFilterBackend, SearchFilter, OrderingFilter]
@@ -70,16 +65,13 @@ class NoteViewSet(viewsets.ModelViewSet):
         return NoteSerializer
 
     def get_queryset(self):
-        return Note.objects.filter(user=self.request.user).select_related(
-            "book"
-        )
+        return Note.objects.filter(user=self.request.user).select_related("book")
 
     def perform_create(self, serializer):
         serializer.save(user=self.request.user)
 
     @action(detail=False, methods=["delete"], url_path="batch-delete")
     def batch_delete(self, request):
-        """Delete multiple notes by id list."""
         ids = request.data.get("ids", [])
         if not ids:
             return Response(
@@ -88,6 +80,4 @@ class NoteViewSet(viewsets.ModelViewSet):
         deleted, _ = Note.objects.filter(
             id__in=ids, user=request.user
         ).delete()
-        return Response(
-            {"deleted": deleted}, status=status.HTTP_200_OK
-        )
+        return Response({"deleted": deleted}, status=status.HTTP_200_OK)