Jannis Braun
32a0c2e618
Wire appendMutationLog + queueOutboxEvent + buildRelayPayload into all DM mutation paths so federation peers receive relay events: - REST: POST /api/dm/:id/messages, PATCH /api/dm/messages/:id, DELETE /api/dm/messages/:id - WebSocket: dm_message_create, dm_message_edit, dm_message_delete, reaction_add (DM path), reaction_remove (DM path) - Fix buildRelayPayload parameter types to accept optional replyToId and editedAt (matching DmMessageWithUser's optional fields)
1116 lines
38 KiB
TypeScript
1116 lines
38 KiB
TypeScript
import type { FastifyInstance } from 'fastify';
|
|
import { eq, and, or, desc, lt, inArray, sql } from 'drizzle-orm';
|
|
import { getDb, schema } from '../db/index.js';
|
|
import { authenticate } from '../utils/auth.js';
|
|
import { generateSnowflake } from '../utils/snowflake.js';
|
|
import { isDmMember } from '../utils/permissions.js';
|
|
import { connectionManager } from '../ws/handler.js';
|
|
import {
|
|
MAX_MESSAGE_LENGTH,
|
|
type DmChannel,
|
|
type DmMessage,
|
|
type DmMessageWithUser,
|
|
type CreateDmRequest,
|
|
type CreateDmMessageRequest,
|
|
type AddDmMemberRequest,
|
|
type PaginatedQuery,
|
|
type Attachment,
|
|
type Reaction,
|
|
type Embed,
|
|
} from '@backspace/shared';
|
|
import { sanitizeUser } from '../utils/sanitize.js';
|
|
import { deleteUploadFile, deleteAttachmentFiles } from '../utils/fileCleanup.js';
|
|
import { fetchDmEmbedsForMessages, resolveEmbeds, reResolveEmbeds, embedRowToEmbed } from '../utils/embedResolver.js';
|
|
import { appendMutationLog, queueOutboxEvent, buildRelayPayload } from '../utils/federationOutbox.js';
|
|
|
|
/**
|
|
* Batch-fetch reactions for a set of DM message IDs.
|
|
* Returns a map from dmMessageId to Reaction[].
|
|
*/
|
|
export function fetchDmReactionsForMessages(dmMessageIds: string[]): Map<string, Reaction[]> {
|
|
if (dmMessageIds.length === 0) return new Map();
|
|
const db = getDb();
|
|
const reactionRows = db.select()
|
|
.from(schema.dmReactions)
|
|
.where(inArray(schema.dmReactions.dmMessageId, dmMessageIds))
|
|
.all();
|
|
|
|
// Batch fetch users for reactions
|
|
const reactionUserIds = [...new Set(reactionRows.map(r => r.userId))];
|
|
const reactionUsers = reactionUserIds.length > 0
|
|
? db.select().from(schema.users).where(inArray(schema.users.id, reactionUserIds)).all()
|
|
: [];
|
|
const reactionUserMap = new Map(reactionUsers.map(u => [u.id, u]));
|
|
|
|
const map = new Map<string, Reaction[]>();
|
|
for (const r of reactionRows) {
|
|
const user = reactionUserMap.get(r.userId);
|
|
const reaction: Reaction = {
|
|
id: r.id,
|
|
messageId: r.dmMessageId,
|
|
userId: r.userId,
|
|
emoji: r.emoji,
|
|
createdAt: r.createdAt,
|
|
user: user ? sanitizeUser(user) : undefined,
|
|
};
|
|
if (!map.has(r.dmMessageId)) {
|
|
map.set(r.dmMessageId, []);
|
|
}
|
|
map.get(r.dmMessageId)!.push(reaction);
|
|
}
|
|
return map;
|
|
}
|
|
|
|
/**
|
|
* Pure transformer: builds a DmMessageWithUser from pre-fetched data.
|
|
*/
|
|
export function buildDmMessageWithUser(
|
|
message: typeof schema.dmMessages.$inferSelect,
|
|
user: typeof schema.users.$inferSelect,
|
|
attachmentRows: (typeof schema.attachments.$inferSelect)[],
|
|
reactions: Reaction[] = [],
|
|
replyTo: DmMessageWithUser | null = null,
|
|
embedRows: (typeof schema.embeds.$inferSelect)[] = [],
|
|
): DmMessageWithUser {
|
|
return {
|
|
id: message.id,
|
|
dmChannelId: message.dmChannelId,
|
|
userId: message.userId,
|
|
replyToId: message.replyToId,
|
|
content: message.content,
|
|
editedAt: message.editedAt,
|
|
createdAt: message.createdAt,
|
|
user: sanitizeUser(user),
|
|
attachments: attachmentRows.map(a => ({
|
|
id: a.id,
|
|
messageId: a.dmMessageId ?? message.id,
|
|
filename: a.filename,
|
|
originalName: a.originalName,
|
|
mimetype: a.mimetype,
|
|
size: a.size,
|
|
thumbnailFilename: a.thumbnailFilename ?? null,
|
|
width: a.width ?? null,
|
|
height: a.height ?? null,
|
|
duration: a.duration ?? null,
|
|
createdAt: a.createdAt,
|
|
})),
|
|
embeds: embedRows.map(e => embedRowToEmbed(e)),
|
|
reactions,
|
|
replyTo,
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Fetches a DM message by ID and hydrates it with user, attachments, reactions, and replyTo.
|
|
*/
|
|
export function getDmMessageWithUser(dmMessageId: string): DmMessageWithUser | null {
|
|
const db = getDb();
|
|
const message = db.select().from(schema.dmMessages).where(eq(schema.dmMessages.id, dmMessageId)).get();
|
|
if (!message) return null;
|
|
|
|
const user = db.select().from(schema.users).where(eq(schema.users.id, message.userId)).get();
|
|
if (!user) return null;
|
|
|
|
const attachmentRows = db.select()
|
|
.from(schema.attachments)
|
|
.where(eq(schema.attachments.dmMessageId, dmMessageId))
|
|
.all();
|
|
|
|
const embedRows = db.select()
|
|
.from(schema.embeds)
|
|
.where(eq(schema.embeds.dmMessageId, dmMessageId))
|
|
.all();
|
|
|
|
const reactionsMap = fetchDmReactionsForMessages([dmMessageId]);
|
|
const reactions = reactionsMap.get(dmMessageId) ?? [];
|
|
|
|
let replyTo: DmMessageWithUser | null = null;
|
|
if (message.replyToId) {
|
|
const replyMsg = db.select().from(schema.dmMessages).where(eq(schema.dmMessages.id, message.replyToId)).get();
|
|
if (replyMsg) {
|
|
const replyUser = db.select().from(schema.users).where(eq(schema.users.id, replyMsg.userId)).get();
|
|
if (replyUser) {
|
|
replyTo = {
|
|
id: replyMsg.id,
|
|
dmChannelId: replyMsg.dmChannelId,
|
|
userId: replyMsg.userId,
|
|
replyToId: replyMsg.replyToId,
|
|
content: replyMsg.content,
|
|
editedAt: replyMsg.editedAt,
|
|
createdAt: replyMsg.createdAt,
|
|
user: sanitizeUser(replyUser),
|
|
attachments: [],
|
|
embeds: [],
|
|
reactions: [],
|
|
};
|
|
}
|
|
}
|
|
}
|
|
|
|
return buildDmMessageWithUser(message, user, attachmentRows, reactions, replyTo, embedRows);
|
|
}
|
|
|
|
/**
|
|
* Broadcasts a DM message to all members of a DM channel.
|
|
* For members who have closed the channel (closed=1), also sends a
|
|
* dm_channel_created event to resurface the channel in their sidebar,
|
|
* and flips their closed flag back to 0.
|
|
*/
|
|
export function broadcastDmMessage(dmChannelId: string, message: DmMessageWithUser): void {
|
|
const db = getDb();
|
|
const dmMembers = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, dmChannelId))
|
|
.all();
|
|
|
|
for (const member of dmMembers) {
|
|
// If this member had closed the DM, resurface it first
|
|
if (member.closed === 1) {
|
|
db.update(schema.dmMembers)
|
|
.set({ closed: 0 })
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, dmChannelId),
|
|
eq(schema.dmMembers.userId, member.userId),
|
|
))
|
|
.run();
|
|
|
|
// Build and send dm_channel_created so their sidebar picks it up
|
|
const allMemberRows = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, dmChannelId))
|
|
.all();
|
|
const memberUserIds = allMemberRows.map(m => m.userId);
|
|
const users = memberUserIds.length > 0
|
|
? db.select().from(schema.users).where(inArray(schema.users.id, memberUserIds)).all()
|
|
: [];
|
|
|
|
const dmChannel = db.select()
|
|
.from(schema.dmChannels)
|
|
.where(eq(schema.dmChannels.id, dmChannelId))
|
|
.get();
|
|
|
|
if (dmChannel) {
|
|
connectionManager.sendToUser(member.userId, {
|
|
type: 'dm_channel_created',
|
|
dmChannel: {
|
|
id: dmChannel.id,
|
|
ownerId: dmChannel.ownerId ?? null,
|
|
createdAt: dmChannel.createdAt,
|
|
members: users.map(u => sanitizeUser(u)),
|
|
lastMessage: message,
|
|
},
|
|
});
|
|
}
|
|
}
|
|
|
|
connectionManager.sendToUser(member.userId, {
|
|
type: 'dm_message_created',
|
|
message,
|
|
});
|
|
}
|
|
}
|
|
|
|
export async function dmRoutes(app: FastifyInstance): Promise<void> {
|
|
// GET /api/dm - List user's DM channels
|
|
app.get('/api/dm', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const db = getDb();
|
|
|
|
const memberships = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(and(
|
|
eq(schema.dmMembers.userId, request.userId),
|
|
eq(schema.dmMembers.closed, 0),
|
|
))
|
|
.all();
|
|
|
|
if (memberships.length === 0) {
|
|
return reply.code(200).send([]);
|
|
}
|
|
|
|
const dmChannelIds = memberships.map(m => m.dmChannelId);
|
|
|
|
// Batch fetch all DM channels
|
|
const channelRows = db.select().from(schema.dmChannels)
|
|
.where(inArray(schema.dmChannels.id, dmChannelIds)).all();
|
|
const channelMap = new Map(channelRows.map(c => [c.id, c]));
|
|
|
|
// Batch fetch all DM members
|
|
const allMemberRows = db.select().from(schema.dmMembers)
|
|
.where(inArray(schema.dmMembers.dmChannelId, dmChannelIds)).all();
|
|
const membersByChannel = new Map<string, string[]>();
|
|
for (const m of allMemberRows) {
|
|
if (!membersByChannel.has(m.dmChannelId)) membersByChannel.set(m.dmChannelId, []);
|
|
membersByChannel.get(m.dmChannelId)!.push(m.userId);
|
|
}
|
|
|
|
// Batch fetch all unique users
|
|
const allUserIds = [...new Set(allMemberRows.map(m => m.userId))];
|
|
const userRows = allUserIds.length > 0
|
|
? db.select().from(schema.users).where(inArray(schema.users.id, allUserIds)).all()
|
|
: [];
|
|
const userMap = new Map(userRows.map(u => [u.id, u]));
|
|
|
|
// Batch fetch last message per DM channel:
|
|
// Get the max created_at per channel, then fetch matching messages
|
|
const maxTimestamps = db.select({
|
|
dmChannelId: schema.dmMessages.dmChannelId,
|
|
maxCreatedAt: sql<number>`MAX(${schema.dmMessages.createdAt})`.as('max_created_at'),
|
|
})
|
|
.from(schema.dmMessages)
|
|
.where(inArray(schema.dmMessages.dmChannelId, dmChannelIds))
|
|
.groupBy(schema.dmMessages.dmChannelId)
|
|
.all();
|
|
|
|
const lastMessageMap = new Map<string, { id: string; dmChannelId: string; userId: string; content: string | null; createdAt: number }>();
|
|
if (maxTimestamps.length > 0) {
|
|
// Build conditions to fetch the actual message rows matching max timestamps
|
|
const conditions = maxTimestamps.map(t =>
|
|
and(eq(schema.dmMessages.dmChannelId, t.dmChannelId), eq(schema.dmMessages.createdAt, t.maxCreatedAt!))
|
|
);
|
|
const lastMessages = db.select()
|
|
.from(schema.dmMessages)
|
|
.where(or(...conditions))
|
|
.all();
|
|
for (const m of lastMessages) {
|
|
// In case of ties, keep the first one per channel
|
|
if (!lastMessageMap.has(m.dmChannelId)) {
|
|
lastMessageMap.set(m.dmChannelId, {
|
|
id: m.id, dmChannelId: m.dmChannelId, userId: m.userId,
|
|
content: m.content, createdAt: m.createdAt,
|
|
});
|
|
}
|
|
}
|
|
}
|
|
|
|
// Assemble results
|
|
const dmChannels: DmChannel[] = [];
|
|
for (const channelId of dmChannelIds) {
|
|
const channel = channelMap.get(channelId);
|
|
if (!channel) continue;
|
|
|
|
const memberIds = membersByChannel.get(channelId) ?? [];
|
|
const members = memberIds
|
|
.map(id => userMap.get(id))
|
|
.filter((u): u is NonNullable<typeof u> => u !== undefined)
|
|
.map(u => sanitizeUser(u));
|
|
|
|
const lastMsg = lastMessageMap.get(channelId) ?? null;
|
|
|
|
dmChannels.push({
|
|
id: channel.id,
|
|
ownerId: channel.ownerId ?? null,
|
|
createdAt: channel.createdAt,
|
|
members,
|
|
lastMessage: lastMsg ? {
|
|
id: lastMsg.id,
|
|
dmChannelId: lastMsg.dmChannelId,
|
|
userId: lastMsg.userId,
|
|
content: lastMsg.content,
|
|
createdAt: lastMsg.createdAt,
|
|
} : null,
|
|
});
|
|
}
|
|
|
|
// Sort by last message timestamp (newest first)
|
|
dmChannels.sort((a, b) => {
|
|
const aTime = a.lastMessage?.createdAt ?? a.createdAt;
|
|
const bTime = b.lastMessage?.createdAt ?? b.createdAt;
|
|
return bTime - aTime;
|
|
});
|
|
|
|
return reply.code(200).send(dmChannels);
|
|
});
|
|
|
|
// POST /api/dm - Create or get existing DM channel
|
|
app.post<{ Body: CreateDmRequest }>('/api/dm', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { userId } = request.body;
|
|
|
|
if (!userId || typeof userId !== 'string') {
|
|
return reply.code(400).send({ error: 'userId is required', statusCode: 400 });
|
|
}
|
|
|
|
if (userId === request.userId) {
|
|
return reply.code(400).send({ error: 'Cannot create DM with yourself', statusCode: 400 });
|
|
}
|
|
|
|
const db = getDb();
|
|
|
|
// Check if target user exists
|
|
const targetUser = db.select().from(schema.users).where(eq(schema.users.id, userId)).get();
|
|
if (!targetUser) {
|
|
return reply.code(404).send({ error: 'User not found', statusCode: 404 });
|
|
}
|
|
|
|
// Check if DM channel already exists between these two users
|
|
// (both have membership rows, regardless of closed state)
|
|
const myDms = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.userId, request.userId))
|
|
.all();
|
|
|
|
for (const myDm of myDms) {
|
|
const otherMember = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, myDm.dmChannelId),
|
|
eq(schema.dmMembers.userId, userId),
|
|
))
|
|
.get();
|
|
|
|
if (otherMember) {
|
|
// Only match 1-on-1 DMs (exactly 2 members). Skip group DMs that
|
|
// happen to include the target user to avoid returning the wrong channel.
|
|
const memberCount = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, myDm.dmChannelId))
|
|
.all()
|
|
.length;
|
|
if (memberCount !== 2) continue;
|
|
|
|
// DM channel already exists between these users
|
|
const dmChannel = db.select()
|
|
.from(schema.dmChannels)
|
|
.where(eq(schema.dmChannels.id, myDm.dmChannelId))
|
|
.get();
|
|
|
|
if (!dmChannel) continue;
|
|
|
|
// Reopen if the requesting user had closed it
|
|
if (myDm.closed === 1) {
|
|
db.update(schema.dmMembers)
|
|
.set({ closed: 0 })
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, myDm.dmChannelId),
|
|
eq(schema.dmMembers.userId, request.userId),
|
|
))
|
|
.run();
|
|
}
|
|
|
|
const dmMemberRows = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, myDm.dmChannelId))
|
|
.all();
|
|
|
|
const memberUserIds = dmMemberRows.map(m => m.userId);
|
|
const users = db.select().from(schema.users).where(inArray(schema.users.id, memberUserIds)).all();
|
|
|
|
// Fetch actual last message
|
|
const lastMsgRows = db.select()
|
|
.from(schema.dmMessages)
|
|
.where(eq(schema.dmMessages.dmChannelId, myDm.dmChannelId))
|
|
.orderBy(desc(schema.dmMessages.createdAt))
|
|
.limit(1)
|
|
.all();
|
|
const lastMsg = lastMsgRows[0] ?? null;
|
|
|
|
const result: DmChannel = {
|
|
id: dmChannel.id,
|
|
ownerId: dmChannel.ownerId ?? null,
|
|
createdAt: dmChannel.createdAt,
|
|
members: users.map(u => sanitizeUser(u)),
|
|
lastMessage: lastMsg ? {
|
|
id: lastMsg.id,
|
|
dmChannelId: lastMsg.dmChannelId,
|
|
userId: lastMsg.userId,
|
|
content: lastMsg.content,
|
|
createdAt: lastMsg.createdAt,
|
|
} : null,
|
|
};
|
|
|
|
return reply.code(200).send(result);
|
|
}
|
|
}
|
|
|
|
// Create new DM channel with both members atomically
|
|
const dmChannelId = generateSnowflake();
|
|
const now = Date.now();
|
|
|
|
db.transaction((tx) => {
|
|
tx.insert(schema.dmChannels).values({
|
|
id: dmChannelId,
|
|
ownerId: request.userId,
|
|
createdAt: now,
|
|
}).run();
|
|
|
|
tx.insert(schema.dmMembers).values({
|
|
dmChannelId,
|
|
userId: request.userId,
|
|
}).run();
|
|
|
|
tx.insert(schema.dmMembers).values({
|
|
dmChannelId,
|
|
userId,
|
|
}).run();
|
|
});
|
|
|
|
const currentUserRow = db.select().from(schema.users).where(eq(schema.users.id, request.userId)).get();
|
|
const members = [currentUserRow, targetUser]
|
|
.filter((u): u is NonNullable<typeof u> => u !== undefined)
|
|
.map(u => sanitizeUser(u));
|
|
|
|
const result: DmChannel = {
|
|
id: dmChannelId,
|
|
ownerId: request.userId,
|
|
createdAt: now,
|
|
members,
|
|
lastMessage: null,
|
|
};
|
|
|
|
// Broadcast dm_channel_created to the other user so their sidebar updates
|
|
connectionManager.sendToUser(userId, {
|
|
type: 'dm_channel_created',
|
|
dmChannel: result,
|
|
});
|
|
|
|
return reply.code(201).send(result);
|
|
});
|
|
|
|
// DELETE /api/dm/:id - Close (hide) a DM channel for the requesting user
|
|
app.delete<{ Params: { id: string } }>('/api/dm/:id', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const db = getDb();
|
|
|
|
// Verify the user is a member of this DM channel
|
|
const membership = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, id),
|
|
eq(schema.dmMembers.userId, request.userId),
|
|
))
|
|
.get();
|
|
|
|
if (!membership) {
|
|
return reply.code(403).send({ error: 'You are not a member of this DM channel', statusCode: 403 });
|
|
}
|
|
|
|
// Soft close: set closed flag (preserves membership for future message delivery)
|
|
db.update(schema.dmMembers)
|
|
.set({ closed: 1 })
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, id),
|
|
eq(schema.dmMembers.userId, request.userId),
|
|
))
|
|
.run();
|
|
|
|
// Broadcast dm_channel_closed to self for multi-tab sync
|
|
connectionManager.sendToUser(request.userId, {
|
|
type: 'dm_channel_closed',
|
|
dmChannelId: id,
|
|
});
|
|
|
|
return reply.code(200).send({ success: true });
|
|
});
|
|
|
|
// POST /api/dm/:id/members - Add a user to an existing DM channel (group DM upgrade)
|
|
app.post<{ Params: { id: string }; Body: AddDmMemberRequest }>('/api/dm/:id/members', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const { userId: targetUserId } = request.body;
|
|
|
|
if (!targetUserId || typeof targetUserId !== 'string') {
|
|
return reply.code(400).send({ error: 'userId is required', statusCode: 400 });
|
|
}
|
|
|
|
const db = getDb();
|
|
|
|
// Validate caller is a member
|
|
if (!isDmMember(id, request.userId)) {
|
|
return reply.code(403).send({ error: 'You are not a member of this DM channel', statusCode: 403 });
|
|
}
|
|
|
|
// Enforce DM channel ownership: only the owner can add members (for new-style group DMs)
|
|
const dmChannel = db.select().from(schema.dmChannels).where(eq(schema.dmChannels.id, id)).get();
|
|
if (!dmChannel) {
|
|
return reply.code(404).send({ error: 'DM channel not found', statusCode: 404 });
|
|
}
|
|
if (dmChannel.ownerId && dmChannel.ownerId !== request.userId) {
|
|
return reply.code(403).send({ error: 'Only the group owner can add members', statusCode: 403 });
|
|
}
|
|
|
|
// Validate target user exists
|
|
const targetUser = db.select().from(schema.users).where(eq(schema.users.id, targetUserId)).get();
|
|
if (!targetUser) {
|
|
return reply.code(404).send({ error: 'User not found', statusCode: 404 });
|
|
}
|
|
|
|
// Validate the adder and target are friends
|
|
const friendship = db.select().from(schema.friends).where(
|
|
or(
|
|
and(eq(schema.friends.userId, request.userId), eq(schema.friends.friendId, targetUserId)),
|
|
and(eq(schema.friends.userId, targetUserId), eq(schema.friends.friendId, request.userId)),
|
|
),
|
|
).get();
|
|
|
|
if (!friendship) {
|
|
return reply.code(403).send({ error: 'You can only add friends to group DMs', statusCode: 403 });
|
|
}
|
|
|
|
// Validate target is not already a member
|
|
const existingMembership = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, id),
|
|
eq(schema.dmMembers.userId, targetUserId),
|
|
))
|
|
.get();
|
|
|
|
if (existingMembership) {
|
|
return reply.code(400).send({ error: 'User is already a member of this DM channel', statusCode: 400 });
|
|
}
|
|
|
|
// Validate member count < 10
|
|
const currentMembers = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, id))
|
|
.all();
|
|
|
|
if (currentMembers.length >= 10) {
|
|
return reply.code(400).send({ error: 'Group DM cannot exceed 10 members', statusCode: 400 });
|
|
}
|
|
|
|
// Insert dm_members row for new user
|
|
db.insert(schema.dmMembers).values({
|
|
dmChannelId: id,
|
|
userId: targetUserId,
|
|
}).run();
|
|
|
|
// Build full DmChannel response with all members
|
|
const allMemberRows = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, id))
|
|
.all();
|
|
const memberUserIds = allMemberRows.map(m => m.userId);
|
|
const users = memberUserIds.length > 0
|
|
? db.select().from(schema.users).where(inArray(schema.users.id, memberUserIds)).all()
|
|
: [];
|
|
|
|
// Fetch last message
|
|
const lastMsgRows = db.select()
|
|
.from(schema.dmMessages)
|
|
.where(eq(schema.dmMessages.dmChannelId, id))
|
|
.orderBy(desc(schema.dmMessages.createdAt))
|
|
.limit(1)
|
|
.all();
|
|
const lastMsg = lastMsgRows[0] ?? null;
|
|
|
|
const result: DmChannel = {
|
|
id: dmChannel.id,
|
|
ownerId: dmChannel.ownerId ?? null,
|
|
createdAt: dmChannel.createdAt,
|
|
members: users.map(u => sanitizeUser(u)),
|
|
lastMessage: lastMsg ? {
|
|
id: lastMsg.id,
|
|
dmChannelId: lastMsg.dmChannelId,
|
|
userId: lastMsg.userId,
|
|
content: lastMsg.content,
|
|
createdAt: lastMsg.createdAt,
|
|
} : null,
|
|
};
|
|
|
|
const newUser = sanitizeUser(targetUser);
|
|
|
|
// Broadcast dm_member_added to all existing members (before the new one)
|
|
for (const member of currentMembers) {
|
|
connectionManager.sendToUser(member.userId, {
|
|
type: 'dm_member_added',
|
|
dmChannelId: id,
|
|
user: newUser,
|
|
});
|
|
}
|
|
|
|
// Send dm_channel_created to the new member so their sidebar picks it up
|
|
connectionManager.sendToUser(targetUserId, {
|
|
type: 'dm_channel_created',
|
|
dmChannel: result,
|
|
});
|
|
|
|
// Active call sync: if there's an active call in this DM, notify the new member
|
|
const room = connectionManager.getRoom(id);
|
|
if (room && room.roomType === 'dm') {
|
|
const meta = room.metadata as { state: string; callerId: string };
|
|
if (meta.state === 'active' || meta.state === 'ringing') {
|
|
// Look up caller name
|
|
const callerRow = db.select().from(schema.users).where(eq(schema.users.id, meta.callerId)).get();
|
|
const callerName = callerRow?.displayName ?? callerRow?.username ?? meta.callerId;
|
|
connectionManager.sendToUser(targetUserId, {
|
|
type: 'dm_call_incoming',
|
|
dmChannelId: id,
|
|
callerId: meta.callerId,
|
|
callerName,
|
|
});
|
|
}
|
|
}
|
|
|
|
return reply.code(200).send(result);
|
|
});
|
|
|
|
// DELETE /api/dm/:id/members - Leave a group DM
|
|
app.delete<{ Params: { id: string } }>('/api/dm/:id/members', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const db = getDb();
|
|
|
|
// Validate caller is a member
|
|
if (!isDmMember(id, request.userId)) {
|
|
return reply.code(403).send({ error: 'You are not a member of this DM channel', statusCode: 403 });
|
|
}
|
|
|
|
// Count members — can't leave a 1-on-1
|
|
const memberRows = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, id))
|
|
.all();
|
|
|
|
if (memberRows.length <= 2) {
|
|
return reply.code(400).send({ error: 'Cannot leave a 1-on-1 DM. Use close instead.', statusCode: 400 });
|
|
}
|
|
|
|
// If user is in this DM's VoiceRoom, leave it first
|
|
const userRoom = connectionManager.getUserRoom(request.userId);
|
|
if (userRoom && userRoom.roomId === id) {
|
|
const left = connectionManager.leaveCurrentRoom(request.userId);
|
|
if (left) {
|
|
// Broadcast voice leave
|
|
connectionManager.sendToDmMembers(id, {
|
|
type: 'voice_state_update',
|
|
channelId: id,
|
|
userId: request.userId,
|
|
action: 'leave',
|
|
});
|
|
// Auto-end call if DM room is now empty
|
|
const updatedRoom = connectionManager.getRoom(id);
|
|
if (updatedRoom && updatedRoom.participants.size === 0) {
|
|
connectionManager.destroyRoom(id);
|
|
connectionManager.sendToDmMembers(id, {
|
|
type: 'dm_call_ended',
|
|
dmChannelId: id,
|
|
});
|
|
}
|
|
}
|
|
connectionManager.clearVoiceUserStatus(request.userId);
|
|
}
|
|
|
|
// Check DM channel ownership before leaving
|
|
const dmChannel = db.select().from(schema.dmChannels).where(eq(schema.dmChannels.id, id)).get();
|
|
|
|
// Delete dm_members row
|
|
db.delete(schema.dmMembers)
|
|
.where(and(
|
|
eq(schema.dmMembers.dmChannelId, id),
|
|
eq(schema.dmMembers.userId, request.userId),
|
|
))
|
|
.run();
|
|
|
|
// Clean up read_states for the departing user
|
|
db.delete(schema.readStates).where(and(
|
|
eq(schema.readStates.userId, request.userId),
|
|
eq(schema.readStates.channelId, id),
|
|
)).run();
|
|
|
|
// Check remaining members
|
|
const remainingMembers = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, id))
|
|
.all();
|
|
|
|
if (remainingMembers.length > 0) {
|
|
// Transfer ownership if the leaving user was the owner
|
|
const nextOwner = remainingMembers[0];
|
|
if (dmChannel && dmChannel.ownerId === request.userId && nextOwner) {
|
|
db.update(schema.dmChannels)
|
|
.set({ ownerId: nextOwner.userId })
|
|
.where(eq(schema.dmChannels.id, id))
|
|
.run();
|
|
}
|
|
|
|
// Broadcast dm_member_removed to remaining members
|
|
for (const member of remainingMembers) {
|
|
connectionManager.sendToUser(member.userId, {
|
|
type: 'dm_member_removed',
|
|
dmChannelId: id,
|
|
userId: request.userId,
|
|
});
|
|
}
|
|
} else {
|
|
// Last member left — clean up the entire DM channel
|
|
// Collect attachment filenames for disk cleanup
|
|
const msgIds = db.select({ id: schema.dmMessages.id })
|
|
.from(schema.dmMessages)
|
|
.where(eq(schema.dmMessages.dmChannelId, id))
|
|
.all()
|
|
.map(m => m.id);
|
|
|
|
const filesToDelete: { filename: string }[] = [];
|
|
if (msgIds.length > 0) {
|
|
const attachmentRows = db.select({ filename: schema.attachments.filename })
|
|
.from(schema.attachments)
|
|
.where(inArray(schema.attachments.dmMessageId, msgIds))
|
|
.all();
|
|
filesToDelete.push(...attachmentRows);
|
|
|
|
// Delete attachments and reactions before cascade
|
|
db.transaction((tx) => {
|
|
tx.delete(schema.attachments).where(inArray(schema.attachments.dmMessageId, msgIds)).run();
|
|
tx.delete(schema.dmReactions).where(inArray(schema.dmReactions.dmMessageId, msgIds)).run();
|
|
});
|
|
}
|
|
|
|
// Clean up all read_states for this DM channel (all members' rows)
|
|
db.delete(schema.readStates).where(eq(schema.readStates.channelId, id)).run();
|
|
|
|
// Delete the DM channel (cascades to dm_messages)
|
|
db.delete(schema.dmChannels).where(eq(schema.dmChannels.id, id)).run();
|
|
|
|
// Clean up files from disk
|
|
deleteAttachmentFiles(filesToDelete);
|
|
}
|
|
|
|
// Send dm_channel_closed to the leaving user
|
|
connectionManager.sendToUser(request.userId, {
|
|
type: 'dm_channel_closed',
|
|
dmChannelId: id,
|
|
});
|
|
|
|
return reply.code(200).send({ success: true });
|
|
});
|
|
|
|
// GET /api/dm/:id/messages - Get DM messages with pagination
|
|
app.get<{ Params: { id: string }; Querystring: PaginatedQuery }>('/api/dm/:id/messages', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const before = request.query.before;
|
|
const limit = Math.min(Math.max(Number(request.query.limit) || 50, 1), 100);
|
|
|
|
if (!isDmMember(id, request.userId)) {
|
|
return reply.code(403).send({ error: 'You are not a member of this DM channel', statusCode: 403 });
|
|
}
|
|
|
|
const db = getDb();
|
|
|
|
let messageRows: (typeof schema.dmMessages.$inferSelect)[];
|
|
|
|
if (before) {
|
|
messageRows = db.select()
|
|
.from(schema.dmMessages)
|
|
.where(and(
|
|
eq(schema.dmMessages.dmChannelId, id),
|
|
lt(schema.dmMessages.id, before)
|
|
))
|
|
.orderBy(desc(schema.dmMessages.createdAt))
|
|
.limit(limit)
|
|
.all();
|
|
} else {
|
|
messageRows = db.select()
|
|
.from(schema.dmMessages)
|
|
.where(eq(schema.dmMessages.dmChannelId, id))
|
|
.orderBy(desc(schema.dmMessages.createdAt))
|
|
.limit(limit)
|
|
.all();
|
|
}
|
|
|
|
messageRows.reverse();
|
|
|
|
if (messageRows.length === 0) {
|
|
return reply.code(200).send([]);
|
|
}
|
|
|
|
// Batch fetch users
|
|
const userIds = [...new Set(messageRows.map(m => m.userId))];
|
|
const users = db.select().from(schema.users).where(inArray(schema.users.id, userIds)).all();
|
|
const userMap = new Map(users.map(u => [u.id, u]));
|
|
|
|
// Batch fetch attachments by dmMessageId
|
|
const messageIds = messageRows.map(m => m.id);
|
|
const allAttachments = db.select()
|
|
.from(schema.attachments)
|
|
.where(inArray(schema.attachments.dmMessageId, messageIds))
|
|
.all();
|
|
const attachmentMap = new Map<string, (typeof schema.attachments.$inferSelect)[]>();
|
|
for (const att of allAttachments) {
|
|
const mid = att.dmMessageId ?? '';
|
|
if (!attachmentMap.has(mid)) attachmentMap.set(mid, []);
|
|
attachmentMap.get(mid)!.push(att);
|
|
}
|
|
|
|
// Batch fetch reactions
|
|
const reactionsMap = fetchDmReactionsForMessages(messageIds);
|
|
|
|
// Batch fetch embeds
|
|
const embedMap = fetchDmEmbedsForMessages(messageIds);
|
|
|
|
// Batch fetch reply-to messages
|
|
const replyToIds = messageRows
|
|
.map(m => m.replyToId)
|
|
.filter((id): id is string => id !== null && id !== undefined);
|
|
const uniqueReplyIds = [...new Set(replyToIds)];
|
|
const replyToMap = new Map<string, DmMessageWithUser>();
|
|
if (uniqueReplyIds.length > 0) {
|
|
const replyMessages = db.select()
|
|
.from(schema.dmMessages)
|
|
.where(inArray(schema.dmMessages.id, uniqueReplyIds))
|
|
.all();
|
|
const replyUserIds = [...new Set(replyMessages.map(m => m.userId))];
|
|
const replyUsers = replyUserIds.length > 0
|
|
? db.select().from(schema.users).where(inArray(schema.users.id, replyUserIds)).all()
|
|
: [];
|
|
const replyUserMap = new Map(replyUsers.map(u => [u.id, u]));
|
|
|
|
for (const rm of replyMessages) {
|
|
const rUser = replyUserMap.get(rm.userId);
|
|
if (!rUser) continue;
|
|
replyToMap.set(rm.id, {
|
|
id: rm.id,
|
|
dmChannelId: rm.dmChannelId,
|
|
userId: rm.userId,
|
|
replyToId: rm.replyToId,
|
|
content: rm.content,
|
|
editedAt: rm.editedAt,
|
|
createdAt: rm.createdAt,
|
|
user: sanitizeUser(rUser),
|
|
attachments: [],
|
|
embeds: [],
|
|
reactions: [],
|
|
});
|
|
}
|
|
}
|
|
|
|
const messages: DmMessageWithUser[] = messageRows
|
|
.map(m => {
|
|
const user = userMap.get(m.userId);
|
|
if (!user) return null;
|
|
const reactions = reactionsMap.get(m.id) ?? [];
|
|
const replyTo = m.replyToId ? (replyToMap.get(m.replyToId) ?? null) : null;
|
|
return buildDmMessageWithUser(m, user, attachmentMap.get(m.id) ?? [], reactions, replyTo, embedMap.get(m.id) ?? []);
|
|
})
|
|
.filter((m): m is DmMessageWithUser => m !== null);
|
|
|
|
return reply.code(200).send(messages);
|
|
});
|
|
|
|
// POST /api/dm/:id/messages - Send a DM message
|
|
app.post<{ Params: { id: string }; Body: CreateDmMessageRequest }>('/api/dm/:id/messages', {
|
|
preHandler: authenticate,
|
|
config: {
|
|
rateLimit: {
|
|
max: 5,
|
|
timeWindow: '5 seconds',
|
|
keyGenerator: (request: any) => request.userId || request.ip,
|
|
},
|
|
},
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const { content, attachments: attachmentIds, replyToId } = request.body;
|
|
|
|
if (!isDmMember(id, request.userId)) {
|
|
return reply.code(403).send({ error: 'You are not a member of this DM channel', statusCode: 403 });
|
|
}
|
|
|
|
const hasContent = content && typeof content === 'string' && content.trim().length > 0;
|
|
const hasAttachments = attachmentIds && attachmentIds.length > 0;
|
|
|
|
if (!hasContent && !hasAttachments) {
|
|
return reply.code(400).send({ error: 'Message must have content or attachments', statusCode: 400 });
|
|
}
|
|
|
|
if (content && content.length > MAX_MESSAGE_LENGTH) {
|
|
return reply.code(400).send({ error: `Message content must be ${MAX_MESSAGE_LENGTH} characters or less`, statusCode: 400 });
|
|
}
|
|
|
|
const db = getDb();
|
|
const messageId = generateSnowflake();
|
|
const now = Date.now();
|
|
|
|
// Verify attachment ownership before linking
|
|
if (attachmentIds && attachmentIds.length > 0) {
|
|
for (const attId of attachmentIds) {
|
|
const att = db.select().from(schema.attachments).where(eq(schema.attachments.id, attId)).get();
|
|
if (!att || att.messageId || att.dmMessageId) {
|
|
return reply.code(400).send({ error: 'Invalid or already-used attachment', statusCode: 400 });
|
|
}
|
|
if (att.uploaderId && att.uploaderId !== request.userId) {
|
|
return reply.code(400).send({ error: 'You do not own this attachment', statusCode: 400 });
|
|
}
|
|
}
|
|
}
|
|
|
|
// Insert message and link attachments atomically
|
|
db.transaction((tx) => {
|
|
tx.insert(schema.dmMessages).values({
|
|
id: messageId,
|
|
dmChannelId: id,
|
|
userId: request.userId,
|
|
replyToId: replyToId || null,
|
|
content: content?.trim() || null,
|
|
createdAt: now,
|
|
}).run();
|
|
|
|
if (attachmentIds && attachmentIds.length > 0) {
|
|
for (const attId of attachmentIds) {
|
|
tx.update(schema.attachments)
|
|
.set({ dmMessageId: messageId })
|
|
.where(eq(schema.attachments.id, attId))
|
|
.run();
|
|
}
|
|
}
|
|
});
|
|
|
|
const message = getDmMessageWithUser(messageId);
|
|
if (!message) {
|
|
return reply.code(500).send({ error: 'Failed to create message', statusCode: 500 });
|
|
}
|
|
|
|
// Broadcast to all DM members (including those who closed the channel)
|
|
broadcastDmMessage(id, message);
|
|
|
|
// Federation: log mutation and queue for relay
|
|
appendMutationLog(messageId, id, 'create');
|
|
queueOutboxEvent(messageId, id, 'create', JSON.stringify({
|
|
message: { ...buildRelayPayload(message, message.user), attachments: [] },
|
|
}));
|
|
|
|
// Resolve embeds asynchronously after responding
|
|
setImmediate(() => {
|
|
resolveEmbeds(messageId, content?.trim() || null, id, true, null).catch(() => {});
|
|
});
|
|
|
|
return reply.code(201).send(message);
|
|
});
|
|
|
|
// PATCH /api/dm/messages/:id - Edit a DM message
|
|
app.patch<{ Params: { id: string }; Body: { content: string } }>('/api/dm/messages/:id', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const { content } = request.body;
|
|
|
|
if (!content || typeof content !== 'string' || content.trim().length === 0) {
|
|
return reply.code(400).send({ error: 'Message content is required', statusCode: 400 });
|
|
}
|
|
|
|
if (content.length > MAX_MESSAGE_LENGTH) {
|
|
return reply.code(400).send({ error: `Message content must be ${MAX_MESSAGE_LENGTH} characters or less`, statusCode: 400 });
|
|
}
|
|
|
|
const db = getDb();
|
|
|
|
const msg = db.select().from(schema.dmMessages).where(eq(schema.dmMessages.id, id)).get();
|
|
if (!msg) {
|
|
return reply.code(404).send({ error: 'Message not found', statusCode: 404 });
|
|
}
|
|
|
|
if (msg.userId !== request.userId) {
|
|
return reply.code(403).send({ error: 'You can only edit your own messages', statusCode: 403 });
|
|
}
|
|
|
|
const now = Date.now();
|
|
db.update(schema.dmMessages)
|
|
.set({ content: content.trim(), editedAt: now })
|
|
.where(eq(schema.dmMessages.id, id))
|
|
.run();
|
|
|
|
// Delete old embeds synchronously so the broadcast reflects the edit
|
|
db.delete(schema.embeds).where(eq(schema.embeds.dmMessageId, id)).run();
|
|
|
|
const updated = getDmMessageWithUser(id);
|
|
if (!updated) {
|
|
return reply.code(500).send({ error: 'Failed to update message', statusCode: 500 });
|
|
}
|
|
|
|
// Broadcast to all DM members
|
|
const dmMembers = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, msg.dmChannelId))
|
|
.all();
|
|
|
|
for (const member of dmMembers) {
|
|
connectionManager.sendToUser(member.userId, {
|
|
type: 'dm_message_updated',
|
|
message: updated,
|
|
});
|
|
}
|
|
|
|
// Federation: log mutation and queue for relay
|
|
appendMutationLog(id, msg.dmChannelId, 'update');
|
|
queueOutboxEvent(id, msg.dmChannelId, 'update', JSON.stringify({
|
|
message: buildRelayPayload(updated, updated.user),
|
|
}));
|
|
|
|
// Resolve new embeds asynchronously (old ones already deleted above)
|
|
setImmediate(() => {
|
|
resolveEmbeds(id, content.trim(), msg.dmChannelId, true, null).catch(() => {});
|
|
});
|
|
|
|
return reply.code(200).send(updated);
|
|
});
|
|
|
|
// DELETE /api/dm/messages/:id - Delete a DM message
|
|
app.delete<{ Params: { id: string } }>('/api/dm/messages/:id', {
|
|
preHandler: authenticate,
|
|
}, async (request, reply) => {
|
|
const { id } = request.params;
|
|
const db = getDb();
|
|
|
|
const msg = db.select().from(schema.dmMessages).where(eq(schema.dmMessages.id, id)).get();
|
|
if (!msg) {
|
|
return reply.code(404).send({ error: 'Message not found', statusCode: 404 });
|
|
}
|
|
|
|
if (msg.userId !== request.userId) {
|
|
return reply.code(403).send({ error: 'You can only delete your own messages', statusCode: 403 });
|
|
}
|
|
|
|
// Collect attachment filenames before deleting
|
|
const attachmentRows = db.select({ filename: schema.attachments.filename })
|
|
.from(schema.attachments)
|
|
.where(eq(schema.attachments.dmMessageId, id))
|
|
.all();
|
|
|
|
// Delete attachments, reactions, and message atomically
|
|
db.transaction((tx) => {
|
|
tx.delete(schema.attachments)
|
|
.where(eq(schema.attachments.dmMessageId, id))
|
|
.run();
|
|
|
|
tx.delete(schema.dmReactions)
|
|
.where(eq(schema.dmReactions.dmMessageId, id))
|
|
.run();
|
|
|
|
tx.delete(schema.dmMessages)
|
|
.where(eq(schema.dmMessages.id, id))
|
|
.run();
|
|
});
|
|
|
|
// Clean up files from disk after transaction commits
|
|
deleteAttachmentFiles(attachmentRows);
|
|
|
|
// Broadcast to all DM members
|
|
const dmMembers = db.select()
|
|
.from(schema.dmMembers)
|
|
.where(eq(schema.dmMembers.dmChannelId, msg.dmChannelId))
|
|
.all();
|
|
|
|
for (const member of dmMembers) {
|
|
connectionManager.sendToUser(member.userId, {
|
|
type: 'dm_message_deleted',
|
|
messageId: id,
|
|
dmChannelId: msg.dmChannelId,
|
|
});
|
|
}
|
|
|
|
// Federation: log mutation and queue for relay
|
|
appendMutationLog(id, msg.dmChannelId, 'delete');
|
|
queueOutboxEvent(id, msg.dmChannelId, 'delete', JSON.stringify({ deleted: true }));
|
|
|
|
return reply.code(200).send({ success: true });
|
|
});
|
|
}
|