From 7c674b07c6efecd3bcadca25671f374a5d62125e Mon Sep 17 00:00:00 2001
From: Mike Johnston <mike@nervesocket.com>
Date: Fri, 30 Jan 2026 17:47:22 -0500
Subject: [PATCH] friend QOL again

---
 backend/src/routes/friends.js | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/backend/src/routes/friends.js b/backend/src/routes/friends.js
index e78be3a..9842778 100644
--- a/backend/src/routes/friends.js
+++ b/backend/src/routes/friends.js
@@ -19,9 +19,15 @@ router.get('/search', authMiddleware, asyncHandler(async (req, res) => {
   const users = await query(
     `SELECT id, username, email 
      FROM users 
-     WHERE (username LIKE ? OR email LIKE ?) AND id != ?
+     WHERE (username LIKE ? OR email LIKE ?) 
+     AND id != ?
+     AND id NOT IN (
+       SELECT friend_id FROM friendships WHERE user_id = ?
+       UNION
+       SELECT user_id FROM friendships WHERE friend_id = ?
+     )
      LIMIT 20`,
-    [searchTerm, searchTerm, req.user.userId]
+    [searchTerm, searchTerm, req.user.userId, req.user.userId, req.user.userId]
   );
 
   res.json({ users });