@commonpub/server 2.3.4 → 2.4.0

package/dist/hub/hub.js

@@ -1,9 +1,11 @@
-import { eq, and, or, desc, sql, ilike, inArray, isNull } from 'drizzle-orm';
-import { hubs, hubMembers, hubPosts, hubPostReplies, hubPostLikes, hubBans, hubInvites, hubShares, contentItems, users, } from '@commonpub/schema';
-import { generateSlug, hasPermission, canManageRole } from '../utils.js';
+import { eq, and, desc, ilike, isNull } from 'drizzle-orm';
+import { hubs, hubMembers, users, } from '@commonpub/schema';
+import { generateSlug, hasPermission } from '../utils.js';
 import { ensureUniqueSlugFor, USER_REF_SELECT, normalizePagination, countRows, escapeLike } from '../query.js';
+import { checkBan } from './moderation.js';
+import { listFederatedHubs } from '../federation/hubMirroring.js';
 // --- Hub CRUD ---
-export async function listHubs(db, filters = {}) {
+export async function listHubs(db, filters = {}, options) {
     const conditions = [isNull(hubs.deletedAt)];
     if (filters.search) {
         conditions.push(ilike(hubs.name, `%${escapeLike(filters.search)}%`));
@@ -27,7 +29,7 @@ export async function listHubs(db, filters = {}) {
             .offset(offset),
         countRows(db, hubs, where),
     ]);
-    const items = rows.map((row) => ({
+    const localItems = rows.map((row) => ({
         id: row.hub.id,
         name: row.hub.name,
         slug: row.hub.slug,
@@ -42,7 +44,53 @@ export async function listHubs(db, filters = {}) {
         createdAt: row.hub.createdAt,
         createdBy: row.createdBy,
     }));
-    return { items, total };
+    if (!options?.includeFederated) {
+        return { items: localItems, total };
+    }
+    // Merge with federated hubs — fetch enough from both sources to fill the page
+    const maxItems = offset + limit;
+    const [localAll, fedResult] = await Promise.all([
+        // Re-fetch local without offset to get enough for merge (only if offset > 0)
+        offset > 0
+            ? db
+                .select({ hub: hubs, createdBy: USER_REF_SELECT })
+                .from(hubs)
+                .innerJoin(users, eq(hubs.createdById, users.id))
+                .where(where)
+                .orderBy(desc(hubs.createdAt))
+                .limit(maxItems)
+                .then((r) => r.map((row) => ({
+                id: row.hub.id,
+                name: row.hub.name,
+                slug: row.hub.slug,
+                description: row.hub.description,
+                hubType: row.hub.hubType,
+                iconUrl: row.hub.iconUrl,
+                bannerUrl: row.hub.bannerUrl,
+                joinPolicy: row.hub.joinPolicy,
+                isOfficial: row.hub.isOfficial,
+                memberCount: row.hub.memberCount,
+                postCount: row.hub.postCount,
+                createdAt: row.hub.createdAt,
+                createdBy: row.createdBy,
+            })))
+            : Promise.resolve(localItems),
+        listFederatedHubs(db, { search: filters.search, limit: maxItems }),
+    ]);
+    // Merge and sort by creation date (local createdAt vs federated receivedAt)
+    const merged = [
+        ...localAll,
+        ...fedResult.items,
+    ];
+    merged.sort((a, b) => {
+        const dateA = 'createdAt' in a ? new Date(a.createdAt).getTime() : new Date(a.receivedAt).getTime();
+        const dateB = 'createdAt' in b ? new Date(b.createdAt).getTime() : new Date(b.receivedAt).getTime();
+        return dateB - dateA;
+    });
+    return {
+        items: merged.slice(offset, offset + limit),
+        total: total + fedResult.total,
+    };
 }
 export async function getHubBySlug(db, slug, requesterId) {
     const rows = await db
@@ -176,849 +224,4 @@ export async function deleteHub(db, hubId, userId) {
         .where(eq(hubs.id, hubId));
     return true;
 }
-// --- Membership ---
-export async function joinHub(db, userId, hubId, inviteToken) {
-    // Check ban
-    const ban = await checkBan(db, hubId, userId);
-    if (ban) {
-        return { joined: false, error: 'You are banned from this hub' };
-    }
-    // Check join policy
-    const hubRow = await db
-        .select({ joinPolicy: hubs.joinPolicy })
-        .from(hubs)
-        .where(eq(hubs.id, hubId))
-        .limit(1);
-    if (hubRow.length === 0) {
-        return { joined: false, error: 'Hub not found' };
-    }
-    const policy = hubRow[0].joinPolicy;
-    if (policy !== 'open') {
-        if (!inviteToken) {
-            return { joined: false, error: 'Invite token required' };
-        }
-        const tokenResult = await validateAndUseInvite(db, inviteToken);
-        if (!tokenResult.valid) {
-            return { joined: false, error: 'Invalid or expired invite token' };
-        }
-        // Verify the invite belongs to this specific hub
-        if (tokenResult.hubId !== hubId) {
-            return { joined: false, error: 'Invite token is not valid for this hub' };
-        }
-    }
-    return db.transaction(async (tx) => {
-        const inserted = await tx
-            .insert(hubMembers)
-            .values({ hubId, userId, role: 'member' })
-            .onConflictDoNothing()
-            .returning();
-        if (inserted.length === 0) {
-            return { joined: true };
-        }
-        await tx
-            .update(hubs)
-            .set({ memberCount: sql `${hubs.memberCount} + 1` })
-            .where(eq(hubs.id, hubId));
-        return { joined: true };
-    });
-}
-export async function leaveHub(db, userId, hubId) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (member.length === 0) {
-        return { left: false, error: 'Not a member' };
-    }
-    if (member[0].role === 'owner') {
-        return { left: false, error: 'Owner cannot leave the hub' };
-    }
-    await db
-        .delete(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)));
-    await db
-        .update(hubs)
-        .set({ memberCount: sql `GREATEST(${hubs.memberCount} - 1, 0)` })
-        .where(eq(hubs.id, hubId));
-    return { left: true };
-}
-export async function getMember(db, hubId, userId) {
-    const rows = await db
-        .select({
-        member: hubMembers,
-        user: USER_REF_SELECT,
-    })
-        .from(hubMembers)
-        .innerJoin(users, eq(hubMembers.userId, users.id))
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (rows.length === 0)
-        return null;
-    const row = rows[0];
-    return {
-        hubId: row.member.hubId,
-        userId: row.member.userId,
-        role: row.member.role,
-        joinedAt: row.member.joinedAt,
-        user: row.user,
-    };
-}
-export async function listMembers(db, hubId, opts = {}) {
-    const { limit, offset } = normalizePagination(opts);
-    const where = eq(hubMembers.hubId, hubId);
-    const [rows, total] = await Promise.all([
-        db
-            .select({
-            member: hubMembers,
-            user: USER_REF_SELECT,
-        })
-            .from(hubMembers)
-            .innerJoin(users, eq(hubMembers.userId, users.id))
-            .where(where)
-            .orderBy(desc(hubMembers.joinedAt))
-            .limit(limit)
-            .offset(offset),
-        countRows(db, hubMembers, where),
-    ]);
-    const items = rows.map((row) => ({
-        hubId: row.member.hubId,
-        userId: row.member.userId,
-        role: row.member.role,
-        joinedAt: row.member.joinedAt,
-        user: row.user,
-    }));
-    return { items, total };
-}
-export async function changeRole(db, actorId, hubId, targetUserId, newRole) {
-    const [actorMember, targetMember] = await Promise.all([
-        db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, actorId)))
-            .limit(1),
-        db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, targetUserId)))
-            .limit(1),
-    ]);
-    if (actorMember.length === 0) {
-        return { changed: false, error: 'Not a member' };
-    }
-    if (targetMember.length === 0) {
-        return { changed: false, error: 'Target is not a member' };
-    }
-    if (!hasPermission(actorMember[0].role, 'manageMembers')) {
-        return { changed: false, error: 'Insufficient permissions' };
-    }
-    if (!canManageRole(actorMember[0].role, targetMember[0].role)) {
-        return { changed: false, error: 'Cannot manage a user with equal or higher role' };
-    }
-    if (newRole === 'owner') {
-        return { changed: false, error: 'Cannot promote to owner' };
-    }
-    await db
-        .update(hubMembers)
-        .set({ role: newRole })
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, targetUserId)));
-    return { changed: true };
-}
-export async function kickMember(db, actorId, hubId, targetUserId) {
-    const [actorMember, targetMember] = await Promise.all([
-        db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, actorId)))
-            .limit(1),
-        db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, targetUserId)))
-            .limit(1),
-    ]);
-    if (actorMember.length === 0) {
-        return { kicked: false, error: 'Not a member' };
-    }
-    if (targetMember.length === 0) {
-        return { kicked: false, error: 'Target is not a member' };
-    }
-    if (!hasPermission(actorMember[0].role, 'kickMember')) {
-        return { kicked: false, error: 'Insufficient permissions' };
-    }
-    if (!canManageRole(actorMember[0].role, targetMember[0].role)) {
-        return { kicked: false, error: 'Cannot kick a user with equal or higher role' };
-    }
-    await db
-        .delete(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, targetUserId)));
-    await db
-        .update(hubs)
-        .set({ memberCount: sql `GREATEST(${hubs.memberCount} - 1, 0)` })
-        .where(eq(hubs.id, hubId));
-    return { kicked: true };
-}
-// --- Posts & Replies ---
-export async function createPost(db, authorId, input) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, input.hubId), eq(hubMembers.userId, authorId)))
-        .limit(1);
-    if (member.length === 0) {
-        throw new Error('Must be a member to post');
-    }
-    return db.transaction(async (tx) => {
-        const [post] = await tx
-            .insert(hubPosts)
-            .values({
-            hubId: input.hubId,
-            authorId,
-            type: input.type ?? 'text',
-            content: input.content,
-        })
-            .returning();
-        await tx
-            .update(hubs)
-            .set({ postCount: sql `${hubs.postCount} + 1` })
-            .where(eq(hubs.id, input.hubId));
-        const author = await tx
-            .select(USER_REF_SELECT)
-            .from(users)
-            .where(eq(users.id, authorId))
-            .limit(1);
-        return {
-            id: post.id,
-            hubId: post.hubId,
-            type: post.type,
-            content: post.content,
-            isPinned: post.isPinned,
-            isLocked: post.isLocked,
-            likeCount: 0,
-            replyCount: 0,
-            createdAt: post.createdAt,
-            updatedAt: post.updatedAt,
-            author: author[0] ?? { id: authorId, username: 'unknown', displayName: null, avatarUrl: null },
-        };
-    });
-}
-export async function listPosts(db, hubId, filters = {}) {
-    const conditions = [eq(hubPosts.hubId, hubId)];
-    if (filters.type) {
-        conditions.push(eq(hubPosts.type, filters.type));
-    }
-    const where = and(...conditions);
-    const { limit, offset } = normalizePagination(filters);
-    const [rows, total] = await Promise.all([
-        db
-            .select({
-            post: hubPosts,
-            author: USER_REF_SELECT,
-        })
-            .from(hubPosts)
-            .innerJoin(users, eq(hubPosts.authorId, users.id))
-            .where(where)
-            .orderBy(desc(hubPosts.isPinned), desc(hubPosts.createdAt))
-            .limit(limit)
-            .offset(offset),
-        countRows(db, hubPosts, where),
-    ]);
-    const items = rows.map((row) => {
-        const item = {
-            id: row.post.id,
-            hubId: row.post.hubId,
-            type: row.post.type,
-            content: row.post.content,
-            isPinned: row.post.isPinned,
-            isLocked: row.post.isLocked,
-            likeCount: row.post.likeCount,
-            replyCount: row.post.replyCount,
-            createdAt: row.post.createdAt,
-            updatedAt: row.post.updatedAt,
-            author: row.author,
-        };
-        if (row.post.type === 'share') {
-            try {
-                item.sharedContent = JSON.parse(row.post.content);
-            }
-            catch {
-                // Content is not valid JSON, leave as-is
-            }
-        }
-        return item;
-    });
-    // Backfill missing cover images on share posts (for shares created before enrichment)
-    const sharesToEnrich = items.filter((i) => i.type === 'share' && i.sharedContent && !i.sharedContent.coverImageUrl && i.sharedContent.contentId);
-    if (sharesToEnrich.length > 0) {
-        const contentIds = sharesToEnrich.map((i) => i.sharedContent.contentId);
-        const enrichData = await db
-            .select({ id: contentItems.id, coverImageUrl: contentItems.coverImageUrl, description: contentItems.description })
-            .from(contentItems)
-            .where(inArray(contentItems.id, contentIds));
-        const enrichMap = new Map(enrichData.map((e) => [e.id, e]));
-        for (const item of sharesToEnrich) {
-            const sc = item.sharedContent;
-            const enrich = enrichMap.get(sc.contentId);
-            if (enrich) {
-                sc.coverImageUrl = enrich.coverImageUrl;
-                sc.description = enrich.description;
-            }
-        }
-    }
-    return { items, total };
-}
-export async function deletePost(db, postId, userId, hubId) {
-    const post = await db
-        .select({ authorId: hubPosts.authorId })
-        .from(hubPosts)
-        .where(eq(hubPosts.id, postId))
-        .limit(1);
-    if (post.length === 0)
-        return false;
-    if (post[0].authorId !== userId) {
-        const member = await db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-            .limit(1);
-        if (member.length === 0 || !hasPermission(member[0].role, 'deletePost')) {
-            return false;
-        }
-    }
-    await db.delete(hubPosts).where(eq(hubPosts.id, postId));
-    await db
-        .update(hubs)
-        .set({ postCount: sql `GREATEST(${hubs.postCount} - 1, 0)` })
-        .where(eq(hubs.id, hubId));
-    return true;
-}
-export async function togglePinPost(db, postId, userId, hubId) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (member.length === 0 || !hasPermission(member[0].role, 'pinPost')) {
-        return null;
-    }
-    const post = await db
-        .select({ isPinned: hubPosts.isPinned })
-        .from(hubPosts)
-        .where(eq(hubPosts.id, postId))
-        .limit(1);
-    if (post.length === 0)
-        return null;
-    const newPinned = !post[0].isPinned;
-    await db
-        .update(hubPosts)
-        .set({ isPinned: newPinned, updatedAt: new Date() })
-        .where(eq(hubPosts.id, postId));
-    return { pinned: newPinned };
-}
-export async function toggleLockPost(db, postId, userId, hubId) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (member.length === 0 || !hasPermission(member[0].role, 'lockPost')) {
-        return null;
-    }
-    const post = await db
-        .select({ isLocked: hubPosts.isLocked })
-        .from(hubPosts)
-        .where(eq(hubPosts.id, postId))
-        .limit(1);
-    if (post.length === 0)
-        return null;
-    const newLocked = !post[0].isLocked;
-    await db
-        .update(hubPosts)
-        .set({ isLocked: newLocked, updatedAt: new Date() })
-        .where(eq(hubPosts.id, postId));
-    return { locked: newLocked };
-}
-/**
- * Get a single hub post by ID with author info.
- */
-export async function getPostById(db, postId) {
-    const [row] = await db
-        .select({
-        post: hubPosts,
-        author: USER_REF_SELECT,
-    })
-        .from(hubPosts)
-        .innerJoin(users, eq(hubPosts.authorId, users.id))
-        .where(eq(hubPosts.id, postId))
-        .limit(1);
-    if (!row)
-        return null;
-    const item = {
-        id: row.post.id,
-        hubId: row.post.hubId,
-        type: row.post.type,
-        content: row.post.content,
-        isPinned: row.post.isPinned,
-        isLocked: row.post.isLocked,
-        likeCount: row.post.likeCount,
-        replyCount: row.post.replyCount,
-        createdAt: row.post.createdAt,
-        updatedAt: row.post.updatedAt,
-        author: row.author,
-    };
-    if (row.post.type === 'share') {
-        try {
-            item.sharedContent = JSON.parse(row.post.content);
-        }
-        catch { /* not JSON */ }
-    }
-    return item;
-}
-/**
- * Like a hub post. Returns true if liked, false if already liked.
- */
-export async function likePost(db, userId, postId) {
-    // Use ON CONFLICT to handle concurrent requests atomically
-    const result = await db
-        .insert(hubPostLikes)
-        .values({ postId, userId })
-        .onConflictDoNothing({ target: [hubPostLikes.postId, hubPostLikes.userId] })
-        .returning({ id: hubPostLikes.id });
-    if (result.length === 0)
-        return false; // Already liked
-    await db.update(hubPosts).set({ likeCount: sql `${hubPosts.likeCount} + 1` }).where(eq(hubPosts.id, postId));
-    return true;
-}
-/**
- * Unlike a hub post. Returns true if unliked, false if wasn't liked.
- */
-export async function unlikePost(db, userId, postId) {
-    const existing = await db
-        .select({ id: hubPostLikes.id })
-        .from(hubPostLikes)
-        .where(and(eq(hubPostLikes.postId, postId), eq(hubPostLikes.userId, userId)))
-        .limit(1);
-    if (existing.length === 0)
-        return false;
-    await db.delete(hubPostLikes).where(eq(hubPostLikes.id, existing[0].id));
-    await db.update(hubPosts).set({ likeCount: sql `GREATEST(${hubPosts.likeCount} - 1, 0)` }).where(eq(hubPosts.id, postId));
-    return true;
-}
-/**
- * Check if a user has liked a hub post.
- */
-export async function hasLikedPost(db, userId, postId) {
-    const [row] = await db
-        .select({ id: hubPostLikes.id })
-        .from(hubPostLikes)
-        .where(and(eq(hubPostLikes.postId, postId), eq(hubPostLikes.userId, userId)))
-        .limit(1);
-    return !!row;
-}
-export async function createReply(db, authorId, input) {
-    const post = await db
-        .select({ hubId: hubPosts.hubId, isLocked: hubPosts.isLocked })
-        .from(hubPosts)
-        .where(eq(hubPosts.id, input.postId))
-        .limit(1);
-    if (post.length === 0)
-        throw new Error('Post not found');
-    if (post[0].isLocked)
-        throw new Error('Post is locked');
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, post[0].hubId), eq(hubMembers.userId, authorId)))
-        .limit(1);
-    if (member.length === 0)
-        throw new Error('Must be a member to reply');
-    const ban = await checkBan(db, post[0].hubId, authorId);
-    if (ban)
-        throw new Error('You are banned from this hub');
-    const [reply] = await db
-        .insert(hubPostReplies)
-        .values({
-        postId: input.postId,
-        authorId,
-        content: input.content,
-        parentId: input.parentId ?? null,
-    })
-        .returning();
-    await db
-        .update(hubPosts)
-        .set({ replyCount: sql `${hubPosts.replyCount} + 1` })
-        .where(eq(hubPosts.id, input.postId));
-    const author = await db
-        .select(USER_REF_SELECT)
-        .from(users)
-        .where(eq(users.id, authorId))
-        .limit(1);
-    return {
-        id: reply.id,
-        postId: reply.postId,
-        content: reply.content,
-        likeCount: 0,
-        createdAt: reply.createdAt,
-        updatedAt: reply.updatedAt,
-        parentId: reply.parentId,
-        author: author[0],
-    };
-}
-export async function listReplies(db, postId, opts = {}) {
-    const { limit, offset } = normalizePagination(opts);
-    // Fetch root replies with pagination
-    const rootWhere = and(eq(hubPostReplies.postId, postId), isNull(hubPostReplies.parentId));
-    const [rootRows, total] = await Promise.all([
-        db
-            .select({ id: hubPostReplies.id })
-            .from(hubPostReplies)
-            .where(rootWhere)
-            .orderBy(desc(hubPostReplies.createdAt))
-            .limit(limit)
-            .offset(offset),
-        countRows(db, hubPostReplies, rootWhere),
-    ]);
-    if (rootRows.length === 0)
-        return { items: [], total };
-    const rootIds = rootRows.map((r) => r.id);
-    // Fetch root + children in one query
-    const rows = await db
-        .select({
-        reply: hubPostReplies,
-        author: {
-            id: users.id,
-            username: users.username,
-            displayName: users.displayName,
-            avatarUrl: users.avatarUrl,
-        },
-    })
-        .from(hubPostReplies)
-        .innerJoin(users, eq(hubPostReplies.authorId, users.id))
-        .where(and(eq(hubPostReplies.postId, postId), or(and(isNull(hubPostReplies.parentId), inArray(hubPostReplies.id, rootIds)), inArray(hubPostReplies.parentId, rootIds))))
-        .orderBy(desc(hubPostReplies.createdAt));
-    const replyMap = new Map();
-    const rootReplies = [];
-    for (const row of rows) {
-        const item = {
-            id: row.reply.id,
-            postId: row.reply.postId,
-            content: row.reply.content,
-            likeCount: row.reply.likeCount,
-            createdAt: row.reply.createdAt,
-            updatedAt: row.reply.updatedAt,
-            parentId: row.reply.parentId,
-            author: row.author,
-            replies: [],
-        };
-        replyMap.set(item.id, item);
-    }
-    // Preserve root ordering
-    for (const rootId of rootIds) {
-        const item = replyMap.get(rootId);
-        if (item)
-            rootReplies.push(item);
-    }
-    for (const item of replyMap.values()) {
-        if (item.parentId && replyMap.has(item.parentId)) {
-            replyMap.get(item.parentId).replies.push(item);
-        }
-    }
-    return { items: rootReplies, total };
-}
-export async function deleteReply(db, replyId, userId, hubId) {
-    const reply = await db
-        .select({ authorId: hubPostReplies.authorId, postId: hubPostReplies.postId })
-        .from(hubPostReplies)
-        .where(eq(hubPostReplies.id, replyId))
-        .limit(1);
-    if (reply.length === 0)
-        return false;
-    if (reply[0].authorId !== userId) {
-        const member = await db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-            .limit(1);
-        if (member.length === 0 || !hasPermission(member[0].role, 'deletePost')) {
-            return false;
-        }
-    }
-    await db.delete(hubPostReplies).where(eq(hubPostReplies.id, replyId));
-    await db
-        .update(hubPosts)
-        .set({ replyCount: sql `GREATEST(${hubPosts.replyCount} - 1, 0)` })
-        .where(eq(hubPosts.id, reply[0].postId));
-    return true;
-}
-// --- Bans ---
-export async function banUser(db, actorId, hubId, targetUserId, reason, expiresAt) {
-    const [actorMember, targetMember] = await Promise.all([
-        db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, actorId)))
-            .limit(1),
-        db
-            .select({ role: hubMembers.role })
-            .from(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, targetUserId)))
-            .limit(1),
-    ]);
-    if (actorMember.length === 0 || !hasPermission(actorMember[0].role, 'banUser')) {
-        return { banned: false, error: 'Insufficient permissions' };
-    }
-    if (actorMember[0].role === 'moderator' && !expiresAt) {
-        return { banned: false, error: 'Moderators can only issue temporary bans' };
-    }
-    if (targetMember.length > 0) {
-        if (!canManageRole(actorMember[0].role, targetMember[0].role)) {
-            return { banned: false, error: 'Cannot ban a user with equal or higher role' };
-        }
-        await db
-            .delete(hubMembers)
-            .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, targetUserId)));
-        await db
-            .update(hubs)
-            .set({ memberCount: sql `GREATEST(${hubs.memberCount} - 1, 0)` })
-            .where(eq(hubs.id, hubId));
-    }
-    await db.insert(hubBans).values({
-        hubId,
-        userId: targetUserId,
-        bannedById: actorId,
-        reason: reason ?? null,
-        expiresAt: expiresAt ?? null,
-    }).onConflictDoNothing();
-    return { banned: true };
-}
-export async function unbanUser(db, actorId, hubId, targetUserId) {
-    const actorMember = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, actorId)))
-        .limit(1);
-    if (actorMember.length === 0 || !hasPermission(actorMember[0].role, 'banUser')) {
-        return { unbanned: false, error: 'Insufficient permissions' };
-    }
-    await db
-        .delete(hubBans)
-        .where(and(eq(hubBans.hubId, hubId), eq(hubBans.userId, targetUserId)));
-    return { unbanned: true };
-}
-export async function checkBan(db, hubId, userId) {
-    const rows = await db
-        .select({
-        id: hubBans.id,
-        reason: hubBans.reason,
-        expiresAt: hubBans.expiresAt,
-    })
-        .from(hubBans)
-        .where(and(eq(hubBans.hubId, hubId), eq(hubBans.userId, userId)))
-        .limit(1);
-    if (rows.length === 0)
-        return null;
-    const ban = rows[0];
-    if (ban.expiresAt && ban.expiresAt < new Date()) {
-        await db.delete(hubBans).where(eq(hubBans.id, ban.id));
-        return null;
-    }
-    return ban;
-}
-export async function listBans(db, hubId, opts = {}) {
-    // Alias for the banner user (self-join on users table)
-    const bannerUser = {
-        bannerId: sql `banner.id`.as('banner_id'),
-        bannerUsername: sql `banner.username`.as('banner_username'),
-        bannerDisplayName: sql `banner.display_name`.as('banner_display_name'),
-        bannerAvatarUrl: sql `banner.avatar_url`.as('banner_avatar_url'),
-    };
-    const limit = Math.min(opts.limit ?? 50, 100);
-    const offset = opts.offset ?? 0;
-    const rows = await db
-        .select({
-        ban: hubBans,
-        user: USER_REF_SELECT,
-        ...bannerUser,
-    })
-        .from(hubBans)
-        .innerJoin(users, eq(hubBans.userId, users.id))
-        .innerJoin(sql `users AS banner`, sql `banner.id = ${hubBans.bannedById}`)
-        .where(eq(hubBans.hubId, hubId))
-        .orderBy(desc(hubBans.createdAt))
-        .limit(limit)
-        .offset(offset);
-    return rows.map((row) => ({
-        id: row.ban.id,
-        reason: row.ban.reason,
-        expiresAt: row.ban.expiresAt,
-        createdAt: row.ban.createdAt,
-        user: row.user,
-        bannedBy: {
-            id: row.bannerId,
-            username: row.bannerUsername,
-            displayName: row.bannerDisplayName,
-            avatarUrl: row.bannerAvatarUrl,
-        },
-    }));
-}
-// --- Invites ---
-export async function createInvite(db, userId, hubId, maxUses, expiresAt) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (member.length === 0 || !hasPermission(member[0].role, 'manageMembers')) {
-        return null;
-    }
-    const token = crypto.randomUUID().replace(/-/g, '');
-    const [invite] = await db
-        .insert(hubInvites)
-        .values({
-        hubId,
-        createdById: userId,
-        token,
-        maxUses: maxUses ?? null,
-        expiresAt: expiresAt ?? null,
-    })
-        .returning();
-    const author = await db
-        .select(USER_REF_SELECT)
-        .from(users)
-        .where(eq(users.id, userId))
-        .limit(1);
-    return {
-        id: invite.id,
-        token: invite.token,
-        maxUses: invite.maxUses,
-        useCount: 0,
-        expiresAt: invite.expiresAt,
-        createdAt: invite.createdAt,
-        createdBy: author[0],
-    };
-}
-export async function validateAndUseInvite(db, token) {
-    const updated = await db
-        .update(hubInvites)
-        .set({ useCount: sql `${hubInvites.useCount} + 1` })
-        .where(and(eq(hubInvites.token, token), sql `(${hubInvites.expiresAt} IS NULL OR ${hubInvites.expiresAt} > NOW())`, sql `(${hubInvites.maxUses} IS NULL OR ${hubInvites.useCount} < ${hubInvites.maxUses})`))
-        .returning({ hubId: hubInvites.hubId });
-    if (updated.length === 0)
-        return { valid: false };
-    return { valid: true, hubId: updated[0].hubId };
-}
-export async function revokeInvite(db, inviteId, userId, hubId) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (member.length === 0 || !hasPermission(member[0].role, 'manageMembers')) {
-        return false;
-    }
-    await db.delete(hubInvites).where(eq(hubInvites.id, inviteId));
-    return true;
-}
-export async function listInvites(db, hubId, opts = {}) {
-    const limit = Math.min(opts.limit ?? 50, 100);
-    const offset = opts.offset ?? 0;
-    const rows = await db
-        .select({
-        invite: hubInvites,
-        createdBy: {
-            id: users.id,
-            username: users.username,
-            displayName: users.displayName,
-            avatarUrl: users.avatarUrl,
-        },
-    })
-        .from(hubInvites)
-        .innerJoin(users, eq(hubInvites.createdById, users.id))
-        .where(eq(hubInvites.hubId, hubId))
-        .orderBy(desc(hubInvites.createdAt))
-        .limit(limit)
-        .offset(offset);
-    return rows.map((row) => ({
-        id: row.invite.id,
-        token: row.invite.token,
-        maxUses: row.invite.maxUses,
-        useCount: row.invite.useCount,
-        expiresAt: row.invite.expiresAt,
-        createdAt: row.invite.createdAt,
-        createdBy: row.createdBy,
-    }));
-}
-// --- Content Sharing ---
-export async function shareContent(db, userId, hubId, contentId) {
-    const member = await db
-        .select({ role: hubMembers.role })
-        .from(hubMembers)
-        .where(and(eq(hubMembers.hubId, hubId), eq(hubMembers.userId, userId)))
-        .limit(1);
-    if (member.length === 0)
-        return null;
-    const content = await db
-        .select({
-        id: contentItems.id,
-        title: contentItems.title,
-        slug: contentItems.slug,
-        type: contentItems.type,
-        coverImageUrl: contentItems.coverImageUrl,
-        description: contentItems.description,
-    })
-        .from(contentItems)
-        .where(eq(contentItems.id, contentId))
-        .limit(1);
-    if (content.length === 0)
-        return null;
-    // Check for duplicate share
-    const existing = await db
-        .select({ id: hubShares.id })
-        .from(hubShares)
-        .where(and(eq(hubShares.hubId, hubId), eq(hubShares.contentId, contentId)))
-        .limit(1);
-    if (existing.length > 0)
-        return null;
-    const sharePayload = JSON.stringify({
-        contentId: content[0].id,
-        title: content[0].title,
-        slug: content[0].slug,
-        type: content[0].type,
-        coverImageUrl: content[0].coverImageUrl ?? null,
-        description: content[0].description ?? null,
-    });
-    await db.insert(hubShares).values({
-        hubId,
-        contentId,
-        sharedById: userId,
-    });
-    return createPost(db, userId, {
-        hubId,
-        type: 'share',
-        content: sharePayload,
-    });
-}
-export async function unshareContent(db, userId, hubId, contentId) {
-    const share = await db
-        .select({ id: hubShares.id })
-        .from(hubShares)
-        .where(and(eq(hubShares.hubId, hubId), eq(hubShares.contentId, contentId), eq(hubShares.sharedById, userId)))
-        .limit(1);
-    if (share.length === 0)
-        return false;
-    await db.delete(hubShares).where(eq(hubShares.id, share[0].id));
-    return true;
-}
-export async function listShares(db, hubId) {
-    return db
-        .select({
-        id: hubShares.id,
-        contentId: hubShares.contentId,
-        sharedById: hubShares.sharedById,
-        createdAt: hubShares.createdAt,
-    })
-        .from(hubShares)
-        .where(eq(hubShares.hubId, hubId))
-        .orderBy(desc(hubShares.createdAt));
-}
 //# sourceMappingURL=hub.js.map