gerbeur/api/services/comment-like-service.ts

import { APIErrorCode } from "../../shared/api.ts";
import { APIException } from "../lib/api-exception.ts";
import { isUserRow, type User, userRowToApi } from "../model/user.ts";
import { db } from "../db/connection.ts";
import { type Page, pageOf } from "../lib/pagination.ts";
import { notifyCommentOwnerLike } from "./notification-service.ts";

export interface LikeResult {
  likeCount: number;
  /** Likes on a private dump's comments go to the dump's owner only. */
  isPrivate: boolean;
}

// Visibility of the comment's dump, or a 404 when the user can't see it.
function commentVisibility(commentId: string, userId: string): boolean {
  const row = db.prepare(
    `SELECT d.is_private, d.user_id FROM comments c JOIN dumps d ON d.id = c.dump_id
     WHERE c.id = ?;`,
  ).get(commentId) as { is_private: number; user_id: string } | undefined;
  if (!row || (row.is_private && row.user_id !== userId)) {
    throw new APIException(APIErrorCode.NOT_FOUND, 404, "Comment not found");
  }
  return Boolean(row.is_private);
}

export function castCommentLike(
  commentId: string,
  userId: string,
): LikeResult {
  const isPrivate = commentVisibility(commentId, userId);
  let likeCount: number;
  try {
    db.exec("BEGIN;");
    db.prepare(
      `INSERT INTO comment_likes (comment_id, user_id, created_at) VALUES (?, ?, ?);`,
    ).run(commentId, userId, new Date().toISOString());
    db.prepare(
      `UPDATE comments SET like_count = like_count + 1 WHERE id = ?;`,
    ).run(commentId);
    const row = db.prepare(
      `SELECT like_count FROM comments WHERE id = ?;`,
    ).get(commentId) as { like_count: number } | undefined;
    db.exec("COMMIT;");
    likeCount = row?.like_count ?? 0;
  } catch (err) {
    try {
      db.exec("ROLLBACK;");
    } catch { /* ignore if no active transaction */ }
    if (err instanceof Error && err.message.includes("UNIQUE constraint")) {
      throw new APIException(
        APIErrorCode.VALIDATION_ERROR,
        409,
        "Already liked",
      );
    }
    throw err;
  }
  // Notification is best-effort — must not prevent like_ack from being sent
  try {
    notifyCommentOwnerLike(userId, commentId);
  } catch { /* ignore */ }
  return { likeCount, isPrivate };
}

// No visibility check: taking back a like is harmless, and it's the user's own
// row.
export function removeCommentLike(
  commentId: string,
  userId: string,
): LikeResult {
  const dumpRow = db.prepare(
    `SELECT d.is_private FROM comments c JOIN dumps d ON d.id = c.dump_id
     WHERE c.id = ?;`,
  ).get(commentId) as { is_private: number } | undefined;
  const isPrivate = Boolean(dumpRow?.is_private);
  try {
    db.exec("BEGIN;");
    const result = db.prepare(
      `DELETE FROM comment_likes WHERE comment_id = ? AND user_id = ?;`,
    ).run(commentId, userId);
    if (result.changes === 0) {
      db.exec("ROLLBACK;");
      throw new APIException(APIErrorCode.NOT_FOUND, 404, "Like not found");
    }
    db.prepare(
      `UPDATE comments SET like_count = like_count - 1 WHERE id = ?;`,
    ).run(commentId);
    const row = db.prepare(
      `SELECT like_count FROM comments WHERE id = ?;`,
    ).get(commentId) as { like_count: number } | undefined;
    db.exec("COMMIT;");
    return { likeCount: row?.like_count ?? 0, isPrivate };
  } catch (err) {
    if (err instanceof APIException) throw err;
    db.exec("ROLLBACK;");
    throw err;
  }
}

export function getUserCommentLikes(userId: string): string[] {
  const rows = db.prepare(
    `SELECT comment_id FROM comment_likes WHERE user_id = ?;`,
  ).all(userId) as { comment_id: string }[];
  return rows.map((r) => r.comment_id);
}

export function getCommentLikers(
  commentId: string,
  page: number,
  limit: number,
): Page<User> {
  const offset = (page - 1) * limit;

  const rawRows = db.prepare(
    `SELECT u.id, u.username, u.password_hash, u.role, u.created_at, u.updated_at,
            u.avatar_mime, u.description, u.invited_by, u.email,
            i.username as invited_by_username
     FROM users u
     LEFT JOIN users i ON i.id = u.invited_by
     INNER JOIN comment_likes cl ON cl.comment_id = ? AND cl.user_id = u.id
     ORDER BY cl.created_at DESC
     LIMIT ? OFFSET ?;`,
  ).all(commentId, limit + 1, offset);

  if (!rawRows.every(isUserRow)) {
    throw new APIException(
      APIErrorCode.SERVER_ERROR,
      500,
      "Malformed user data",
    );
  }

  return pageOf(rawRows.map(userRowToApi), limit);
}