v3: added comment likes, added votes/likes list view, added db migrations mechanism, updated project dependencies

api/routes/comments.ts

@@ -9,12 +9,15 @@ import {
 } from "../model/interfaces.ts";
 import { authMiddleware } from "../middleware/auth.ts";
 import { parseOptionalAuth } from "../lib/auth.ts";
+import { parsePagination } from "../lib/pagination.ts";
 import {
   createComment,
   deleteComment,
+  getCommentDumpId,
   getComments,
   updateComment,
 } from "../services/comment-service.ts";
+import { getCommentLikers } from "../services/comment-like-service.ts";
 import { getDump } from "../services/dump-service.ts";
 import {
   broadcastCommentCreated,
@@ -83,6 +86,27 @@ router.patch("/comments/:commentId", authMiddleware, async (ctx) => {
   ctx.response.body = responseBody;
 });
 
+// GET /api/comments/:commentId/likers — optional auth (to access private dump's comment likers)
+router.get("/comments/:commentId/likers", async (ctx) => {
+  const requestingUserId = await parseOptionalAuth(ctx) ?? undefined;
+  const dumpId = getCommentDumpId(ctx.params.commentId);
+  getDump(dumpId, requestingUserId); // enforces privacy, 404s if not visible
+  const { page, limit } = parsePagination(ctx.request.url.searchParams);
+  const { items, total } = getCommentLikers(
+    ctx.params.commentId,
+    page,
+    limit,
+  );
+  ctx.response.body = {
+    success: true,
+    data: {
+      items: items.map(({ passwordHash: _, email: _e, ...pub }) => pub),
+      total,
+      hasMore: page * limit < total,
+    },
+  };
+});
+
 // DELETE /api/comments/:commentId — auth required
 router.delete("/comments/:commentId", authMiddleware, (ctx) => {
   const userId = ctx.state.user.userId;

api/routes/dumps.ts

@@ -23,6 +23,7 @@ import {
   replaceFileDump,
   updateDump,
 } from "../services/dump-service.ts";
+import { getDumpVoters } from "../services/vote-service.ts";
 
 const router = new Router({ prefix: "/api/dumps" });
 
@@ -84,6 +85,21 @@ router.get("/:dumpId", async (ctx) => {
   ctx.response.body = responseBody;
 });
 
+router.get("/:dumpId/voters", async (ctx) => {
+  const requestingUserId = await parseOptionalAuth(ctx) ?? undefined;
+  const dump = getDump(ctx.params.dumpId, requestingUserId);
+  const { page, limit } = parsePagination(ctx.request.url.searchParams);
+  const { items, total } = getDumpVoters(dump.id, page, limit);
+  ctx.response.body = {
+    success: true,
+    data: {
+      items: items.map(({ passwordHash: _, email: _e, ...pub }) => pub),
+      total,
+      hasMore: page * limit < total,
+    },
+  };
+});
+
 router.get("/", async (ctx) => {
   const requestingUserId = await parseOptionalAuth(ctx) ?? undefined;
   const { page, limit } = parsePagination(ctx.request.url.searchParams);

api/routes/ws.ts

@@ -2,6 +2,7 @@ import { Router } from "@oak/oak";
 import { ALLOWED_ORIGINS } from "../config.ts";
 import { verifyJWT } from "../lib/jwt.ts";
 import {
+  broadcastCommentLikeUpdate,
   broadcastPresence,
   broadcastVoteUpdate,
   getOnlineUsers,
@@ -15,6 +16,11 @@ import {
   getUserVotes,
   removeVote,
 } from "../services/vote-service.ts";
+import {
+  castCommentLike,
+  getUserCommentLikes,
+  removeCommentLike,
+} from "../services/comment-like-service.ts";
 import { getUnreadCount } from "../services/notification-service.ts";
 import { getUserById } from "../services/user-service.ts";
 import {
@@ -63,6 +69,9 @@ router.get("/ws", async (ctx) => {
 
     try {
       const myVotes = authPayload ? getUserVotes(authPayload.userId) : [];
+      const myCommentLikes = authPayload
+        ? getUserCommentLikes(authPayload.userId)
+        : [];
       const unreadNotificationCount = authPayload
         ? getUnreadCount(authPayload.userId)
         : 0;
@@ -70,6 +79,7 @@ router.get("/ws", async (ctx) => {
         type: "welcome",
         users: getOnlineUsers(),
         myVotes,
+        myCommentLikes,
         unreadNotificationCount,
       }));
     } catch (err) {
@@ -98,6 +108,12 @@ router.get("/ws", async (ctx) => {
       case "vote_remove":
         handleVote(client, msg.dumpId, "remove");
         break;
+      case "comment_like_cast":
+        handleCommentLike(client, msg.commentId, "cast");
+        break;
+      case "comment_like_remove":
+        handleCommentLike(client, msg.commentId, "remove");
+        break;
     }
   });
 
@@ -141,4 +157,37 @@ function handleVote(
   }
 }
 
+function handleCommentLike(
+  client: WsClient,
+  commentId: string,
+  action: "cast" | "remove",
+): void {
+  const { socket } = client;
+
+  if (!client.userId) {
+    socket.send(
+      JSON.stringify({ type: "error", message: "Authentication required" }),
+    );
+    return;
+  }
+
+  try {
+    const newCount = action === "cast"
+      ? castCommentLike(commentId, client.userId)
+      : removeCommentLike(commentId, client.userId);
+
+    socket.send(JSON.stringify({
+      type: "comment_like_ack",
+      commentId,
+      action,
+      likeCount: newCount,
+    }));
+
+    broadcastCommentLikeUpdate(commentId, newCount, client.userId, action);
+  } catch (err) {
+    const message = err instanceof APIException ? err.message : "Like failed";
+    socket.send(JSON.stringify({ type: "error", message }));
+  }
+}
+
 export default router;