/** * Upvotes on dumps. * * @module */ import { APIErrorCode } from "../../shared/api.ts"; import { APIException } from "../lib/api-exception.ts"; import { isUserRow, type User, userRowToApi } from "../model/user.ts"; import { db } from "../db/connection.ts"; import { type Page, pageOf } from "../lib/pagination.ts"; import { notifyDumpOwnerUpvote } from "./notification-service.ts"; /** A dump's votes after a vote was cast or removed. */ export interface VoteResult { /** The dump's vote count now. */ voteCount: number; /** Whether the dump is private: its vote count goes to its owner only. */ isPrivate: boolean; } /** * Returns whether the dump is private, or throws a 404 when the user can't see * it — voting must not confirm that a private dump exists. */ function visibleDump(dumpId: string, userId: string): { isPrivate: boolean } { const row = db.prepare( `SELECT is_private, user_id FROM dumps WHERE id = ?;`, ).get(dumpId) as { is_private: number; user_id: string } | undefined; if (!row || (row.is_private && row.user_id !== userId)) { throw new APIException(APIErrorCode.NOT_FOUND, 404, "Dump not found"); } return { isPrivate: Boolean(row.is_private) }; } /** * Records `userId`'s upvote on a dump and notifies its poster. * * @throws {APIException} 404 when the dump doesn't exist or is someone else's * private dump, 409 when the user already voted for it. */ export function castVote(dumpId: string, userId: string): VoteResult { const { isPrivate } = visibleDump(dumpId, userId); let voteCount: number; try { db.exec("BEGIN;"); db.prepare( `INSERT INTO votes (dump_id, user_id, created_at) VALUES (?, ?, ?);`, ).run(dumpId, userId, new Date().toISOString()); db.prepare( `UPDATE dumps SET vote_count = vote_count + 1 WHERE id = ?;`, ).run(dumpId); const row = db.prepare( `SELECT vote_count FROM dumps WHERE id = ?;`, ).get(dumpId) as { vote_count: number } | undefined; db.exec("COMMIT;"); voteCount = row?.vote_count ?? 0; } catch (err) { try { db.exec("ROLLBACK;"); } catch { /* ignore if no active transaction */ } if (err instanceof Error && err.message.includes("UNIQUE constraint")) { throw new APIException( APIErrorCode.VALIDATION_ERROR, 409, "Already voted", ); } throw err; } // Notification is best-effort — must not prevent vote_ack from being sent try { notifyDumpOwnerUpvote(userId, dumpId); } catch { /* ignore */ } return { voteCount, isPrivate }; } /** * Takes back `userId`'s upvote on a dump. No visibility check: taking back a * vote on a dump that has since gone private is harmless, and it's the voter's * own row. * * @throws {APIException} 404 when the user hasn't voted for the dump. */ export function removeVote(dumpId: string, userId: string): VoteResult { const row = db.prepare(`SELECT is_private FROM dumps WHERE id = ?;`).get( dumpId, ) as { is_private: number } | undefined; const isPrivate = Boolean(row?.is_private); try { db.exec("BEGIN;"); const result = db.prepare( `DELETE FROM votes WHERE dump_id = ? AND user_id = ?;`, ).run(dumpId, userId); if (result.changes === 0) { db.exec("ROLLBACK;"); throw new APIException(APIErrorCode.NOT_FOUND, 404, "Vote not found"); } db.prepare( `UPDATE dumps SET vote_count = vote_count - 1 WHERE id = ?;`, ).run(dumpId); const count = db.prepare( `SELECT vote_count FROM dumps WHERE id = ?;`, ).get(dumpId) as { vote_count: number } | undefined; db.exec("COMMIT;"); return { voteCount: count?.vote_count ?? 0, isPrivate }; } catch (err) { if (err instanceof APIException) throw err; db.exec("ROLLBACK;"); throw err; } } /** Returns the ids of every dump `userId` upvoted. */ export function getUserVotes(userId: string): string[] { const rows = db.prepare( `SELECT dump_id FROM votes WHERE user_id = ?;`, ).all(userId) as { dump_id: string }[]; return rows.map((r) => r.dump_id); } /** Returns a page of the users who upvoted a dump, latest first. */ export function getDumpVoters( dumpId: string, page: number, limit: number, ): Page { const offset = (page - 1) * limit; const rawRows = db.prepare( `SELECT u.id, u.username, u.password_hash, u.role, u.created_at, u.updated_at, u.avatar_mime, u.description, u.invited_by, u.email, i.username as invited_by_username FROM users u LEFT JOIN users i ON i.id = u.invited_by INNER JOIN votes v ON v.dump_id = ? AND v.user_id = u.id ORDER BY v.created_at DESC LIMIT ? OFFSET ?;`, ).all(dumpId, limit + 1, offset); if (!rawRows.every(isUserRow)) { throw new APIException( APIErrorCode.SERVER_ERROR, 500, "Malformed user data", ); } return pageOf(rawRows.map(userRowToApi), limit); }