Current state

src/app/api/conversations/[id]/messages/route.ts

@@ -0,0 +1,162 @@
+import { NextRequest, NextResponse } from "next/server"
+import { getSessionUser } from "@/lib/auth"
+import { query } from "@/lib/db"
+import { avatarSvgUrl } from "@/lib/avatar"
+
+export async function GET(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  try {
+    const user = await getSessionUser()
+    if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
+
+    const { id } = await params
+
+    const { searchParams } = new URL(_request.url)
+    const limit = parseInt(searchParams.get("limit") || "100", 10)
+    const offset = parseInt(searchParams.get("offset") || "0", 10)
+    const before = searchParams.get("before") || ""
+
+    // Verify user is a participant
+    const partCheck = await query(
+      `SELECT 1 FROM conversation_participants WHERE conversation_id = $1 AND user_id = $2`,
+      [id, user.id]
+    )
+    if (partCheck.rows.length === 0) {
+      return NextResponse.json({ error: "Not a participant" }, { status: 403 })
+    }
+
+    let msgSql = `SELECT m.id, m.sender_id, m.content, m.created_at, m.updated_at, m.deleted_at,
+                         u.first_name || ' ' || u.last_name AS sender_name,
+                         u.email AS sender_email,
+                         u.avatar_url AS sender_avatar_url
+                  FROM messages m
+                  JOIN users u ON u.id = m.sender_id
+                  WHERE m.conversation_id = $1 AND m.deleted_at IS NULL`
+    const msgParams: any[] = [id]
+
+    if (before) {
+      msgSql += ` AND m.created_at < $2`
+      msgParams.push(before)
+    }
+
+    msgSql += ` ORDER BY m.created_at ASC`
+    msgSql += ` LIMIT $${msgParams.length + 1} OFFSET $${msgParams.length + 2}`
+    msgParams.push(limit, offset)
+
+    const [msgResult, otherReadResult] = await Promise.all([
+      query(msgSql, msgParams),
+      query(
+        `SELECT last_read_at FROM conversation_participants
+         WHERE conversation_id = $1 AND user_id != $2`,
+        [id, user.id],
+      ),
+    ])
+
+    const otherLastReadAt = otherReadResult.rows[0]?.last_read_at
+      ? new Date(otherReadResult.rows[0].last_read_at).getTime()
+      : 0
+
+    const messages = msgResult.rows.map((row: any) => ({
+      id: row.id,
+      conversationId: id,
+      senderId: row.sender_id,
+      senderName: row.sender_name,
+      senderAvatar: avatarSvgUrl(row.sender_name),
+      content: row.content,
+      timestamp: formatTime(new Date(row.created_at)),
+      createdAt: row.created_at,
+      read: row.sender_id === user.id
+        ? new Date(row.created_at).getTime() <= otherLastReadAt
+        : true,
+    }))
+
+    return NextResponse.json({ messages })
+  } catch (error) {
+    console.error("Messages error:", error)
+    return NextResponse.json({ error: "Failed to load messages" }, { status: 500 })
+  }
+}
+
+export async function POST(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  try {
+    const user = await getSessionUser()
+    if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
+
+    const { id } = await params
+
+    // Verify user is a participant
+    const partCheck = await query(
+      `SELECT 1 FROM conversation_participants WHERE conversation_id = $1 AND user_id = $2`,
+      [id, user.id]
+    )
+    if (partCheck.rows.length === 0) {
+      return NextResponse.json({ error: "Not a participant" }, { status: 403 })
+    }
+
+    const { content } = await request.json()
+    if (!content?.trim()) {
+      return NextResponse.json({ error: "Message content is required" }, { status: 400 })
+    }
+
+    const result = await query(
+      `INSERT INTO messages (conversation_id, sender_id, content)
+       VALUES ($1, $2, $3)
+       RETURNING id, created_at`,
+      [id, user.id, content.trim()],
+    )
+
+    await query(
+      `UPDATE conversations SET updated_at = NOW() WHERE id = $1`,
+      [id],
+    )
+
+    const msg = result.rows[0]
+    const senderName = `${user.firstName} ${user.lastName}`
+
+    const otherResult = await query(
+      `SELECT user_id FROM conversation_participants
+       WHERE conversation_id = $1 AND user_id != $2`,
+      [id, user.id],
+    )
+
+    for (const row of otherResult.rows) {
+      await query(
+        `INSERT INTO notifications (user_id, type, title, description, link, context_id, context_type)
+         VALUES ($1, 'chat_message', 'New Message', $2, '/chats', $3, 'conversation')`,
+        [row.user_id, `${senderName} sent a message`, id],
+      )
+    }
+
+    return NextResponse.json({
+      message: {
+        id: msg.id,
+        conversationId: id,
+        senderId: user.id,
+        senderName,
+        senderAvatar: user.avatar,
+        content: content.trim(),
+        timestamp: formatTime(new Date(msg.created_at)),
+        createdAt: msg.created_at,
+        read: false,
+      },
+    })
+  } catch (error) {
+    console.error("Send message error:", error)
+    return NextResponse.json({ error: "Failed to send message" }, { status: 500 })
+  }
+}
+
+function formatTime(date: Date): string {
+  const now = new Date()
+  const isToday = date.toDateString() === now.toDateString()
+  if (isToday) {
+    return date.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" })
+  }
+  return date.toLocaleDateString([], { month: "short", day: "numeric" }) + " " +
+    date.toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" })
+}