@taon-dev/cms 21.0.23 → 21.0.24

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comment.abstract.context.ts

@@ -17,11 +17,21 @@ import { TaonCmsCommentRepository } from './taon-cms-comment.repository';
 import { TaonCmsCommentProvider } from './taon-cms-comment.provider';
 import { TaonCmsCommentMiddleware } from './taon-cms-comment.middleware';
 import { TaonCmsCommentSubscriber } from './taon-cms-comment.subscriber';
+import { TaonCmsCommentVoteEntity } from './taon-cms-comment-vote.entity';
+import { TaonCmsCommentSpamReportEntity } from './taon-cms-comment-spam-report.entity';
+import { TaonCmsCommentBlockedUserEntity } from './taon-cms-comment-blocked-user.entity';
+import { TaonCmsCommentBlockedPhraseEntity } from './taon-cms-comment-blocked-phrase.entity';
 export const TaonCmsCommentAbstractContext = createContext(() => ({
     contextName: 'TaonCmsCommentAbstractContext',
     abstract: true,
     contexts: { TaonBaseContext },
-    entities: { TaonCmsCommentEntity },
+    entities: {
+        TaonCmsCommentEntity,
+        TaonCmsCommentVoteEntity,
+        TaonCmsCommentSpamReportEntity,
+        TaonCmsCommentBlockedUserEntity,
+        TaonCmsCommentBlockedPhraseEntity,
+    },
     controllers: { TaonCmsCommentController },
     repositories: { TaonCmsCommentRepository },
     providers: { TaonCmsCommentProvider },

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comment.controller.ts

@@ -10,28 +10,477 @@
   
  * ========================================================================== */
 
-import { TaonController, TaonBaseCrudController, Query, GET, ClassHelpers__NS__asyncHandler, ClassHelpers__NS__ensureClassConfig, ClassHelpers__NS__ensureMethodConfig, ClassHelpers__NS__getClassConfig, ClassHelpers__NS__getClassFnFromObject, ClassHelpers__NS__getControllerConfigs, ClassHelpers__NS__getFullInternalName, ClassHelpers__NS__getMethodsNames, ClassHelpers__NS__getName, ClassHelpers__NS__getOrginalClass, ClassHelpers__NS__getUniqueKey, ClassHelpers__NS__hasParentClassWithName, ClassHelpers__NS__isContextClassObject, ClassHelpers__NS__mapFnError, ClassHelpers__NS__setName, Taon__NS____FILE_RELATIVE_PATH, Taon__NS__asset, Taon__NS__assetsFrom, Taon__NS__assetsListFrom, Taon__NS__createContext, Taon__NS__createContextTemplate, Taon__NS__error, Taon__NS__getResponseValue, Taon__NS__isBrowser, Taon__NS__isElectron, Taon__NS__isNode, Taon__NS__isWebSQL, Taon__NS__LANG_IMPORT_MAP, Taon__NS__removeLoader, Taon__NS__Response, Taon__NS__ResponseHtml, Taon__NS__StartParams } from 'taon/websql-prod';
-import { ___NS__add, ___NS__after, ___NS__ary, ___NS__assign, ___NS__assignIn, ___NS__assignInWith, ___NS__assignWith, ___NS__at, ___NS__attempt, ___NS__before, ___NS__bind, ___NS__bindAll, ___NS__bindKey, ___NS__camelCase, ___NS__capitalize, ___NS__castArray, ___NS__ceil, ___NS__chain, ___NS__chunk, ___NS__clamp, ___NS__clone, ___NS__cloneDeep, ___NS__cloneDeepWith, ___NS__cloneWith, ___NS__compact, ___NS__concat, ___NS__cond, ___NS__conforms, ___NS__conformsTo, ___NS__constant, ___NS__countBy, ___NS__create, ___NS__curry, ___NS__curryRight, ___NS__debounce, ___NS__deburr, ___NS__defaults, ___NS__defaultsDeep, ___NS__defaultTo, ___NS__defer, ___NS__delay, ___NS__difference, ___NS__differenceBy, ___NS__differenceWith, ___NS__divide, ___NS__drop, ___NS__dropRight, ___NS__dropRightWhile, ___NS__dropWhile, ___NS__each, ___NS__eachRight, ___NS__endsWith, ___NS__entries, ___NS__entriesIn, ___NS__eq, ___NS__escape, ___NS__escapeRegExp, ___NS__every, ___NS__extend, ___NS__extendWith, ___NS__fill, ___NS__filter, ___NS__find, ___NS__findIndex, ___NS__findKey, ___NS__findLast, ___NS__findLastIndex, ___NS__findLastKey, ___NS__first, ___NS__flatMap, ___NS__flatMapDeep, ___NS__flatMapDepth, ___NS__flatten, ___NS__flattenDeep, ___NS__flattenDepth, ___NS__flip, ___NS__floor, ___NS__flow, ___NS__flowRight, ___NS__forEach, ___NS__forEachRight, ___NS__forIn, ___NS__forInRight, ___NS__forOwn, ___NS__forOwnRight, ___NS__fromPairs, ___NS__functions, ___NS__functionsIn, ___NS__get, ___NS__groupBy, ___NS__gt, ___NS__gte, ___NS__has, ___NS__hasIn, ___NS__head, ___NS__identity, ___NS__includes, ___NS__indexOf, ___NS__initial, ___NS__inRange, ___NS__intersection, ___NS__intersectionBy, ___NS__intersectionWith, ___NS__invert, ___NS__invertBy, ___NS__invoke, ___NS__invokeMap, ___NS__isArguments, ___NS__isArray, ___NS__isArrayBuffer, ___NS__isArrayLike, ___NS__isArrayLikeObject, ___NS__isBoolean, ___NS__isBuffer, ___NS__isDate, ___NS__isElement, ___NS__isEmpty, ___NS__isEqual, ___NS__isEqualWith, ___NS__isError, ___NS__isFinite, ___NS__isFunction, ___NS__isInteger, ___NS__isLeafObject, ___NS__isLength, ___NS__isMap, ___NS__isMatch, ___NS__isMatchWith, ___NS__isNaN, ___NS__isNative, ___NS__isNil, ___NS__isNull, ___NS__isNumber, ___NS__isObject, ___NS__isObjectLike, ___NS__isPlainObject, ___NS__isRegExp, ___NS__isSafeInteger, ___NS__isSet, ___NS__isString, ___NS__isSymbol, ___NS__isTypedArray, ___NS__isUndefined, ___NS__isWeakMap, ___NS__isWeakSet, ___NS__iteratee, ___NS__join, ___NS__kebabCase, ___NS__keyBy, ___NS__keys, ___NS__keysIn, ___NS__last, ___NS__lastIndexOf, ___NS__lowerCase, ___NS__lowerFirst, ___NS__lt, ___NS__lte, ___NS__map, ___NS__mapKeys, ___NS__mapValues, ___NS__matches, ___NS__matchesProperty, ___NS__max, ___NS__maxBy, ___NS__mean, ___NS__meanBy, ___NS__memoize, ___NS__merge, ___NS__mergeWith, ___NS__method, ___NS__methodOf, ___NS__min, ___NS__minBy, ___NS__mixin, ___NS__multiply, ___NS__negate, ___NS__noop, ___NS__now, ___NS__nth, ___NS__nthArg, ___NS__omit, ___NS__omitBy, ___NS__once, ___NS__orderBy, ___NS__over, ___NS__overArgs, ___NS__overEvery, ___NS__overSome, ___NS__pad, ___NS__padEnd, ___NS__padStart, ___NS__parseInt, ___NS__partial, ___NS__partialRight, ___NS__partition, ___NS__pick, ___NS__pickBy, ___NS__property, ___NS__propertyOf, ___NS__pull, ___NS__pullAll, ___NS__pullAllBy, ___NS__pullAllWith, ___NS__pullAt, ___NS__random, ___NS__range, ___NS__rangeRight, ___NS__rearg, ___NS__reduce, ___NS__reduceRight, ___NS__reject, ___NS__remove, ___NS__repeat, ___NS__replace, ___NS__rest, ___NS__result, ___NS__reverse, ___NS__round, ___NS__sample, ___NS__sampleSize, ___NS__set, ___NS__setWith, ___NS__shuffle, ___NS__size, ___NS__slice, ___NS__snakeCase, ___NS__some, ___NS__sortBy, ___NS__sortedIndex, ___NS__sortedIndexBy, ___NS__sortedIndexOf, ___NS__sortedLastIndex, ___NS__sortedLastIndexBy, ___NS__sortedLastIndexOf, ___NS__sortedUniq, ___NS__sortedUniqBy, ___NS__split, ___NS__spread, ___NS__startCase, ___NS__startsWith, ___NS__stubArray, ___NS__stubFalse, ___NS__stubObject, ___NS__stubString, ___NS__stubTrue, ___NS__subtract, ___NS__sum, ___NS__sumBy, ___NS__tail, ___NS__take, ___NS__takeRight, ___NS__takeRightWhile, ___NS__takeWhile, ___NS__tap, ___NS__template, ___NS__templateSettings, ___NS__throttle, ___NS__thru, ___NS__times, ___NS__toArray, ___NS__toFinite, ___NS__toInteger, ___NS__toLength, ___NS__toLower, ___NS__toNumber, ___NS__toPairs, ___NS__toPairsIn, ___NS__toPath, ___NS__toPlainObject, ___NS__toSafeInteger, ___NS__toString, ___NS__toUpper, ___NS__transform, ___NS__trim, ___NS__trimEnd, ___NS__trimStart, ___NS__truncate, ___NS__unary, ___NS__unescape, ___NS__union, ___NS__unionBy, ___NS__unionWith, ___NS__uniq, ___NS__uniqBy, ___NS__uniqueId, ___NS__uniqWith, ___NS__unset, ___NS__unzip, ___NS__unzipWith, ___NS__update, ___NS__updateWith, ___NS__upperCase, ___NS__upperFirst, ___NS__values, ___NS__valuesIn, ___NS__without, ___NS__words, ___NS__wrap, ___NS__xor, ___NS__xorBy, ___NS__xorWith, ___NS__zip, ___NS__zipObject, ___NS__zipObjectDeep, ___NS__zipWith } from 'tnp-core/websql-prod';
+import { Body, DELETE, GET, HttpStatusEnum, POST, Query, TaonBaseCrudController, TaonController, getStatusCode, Models__NS__ClassType, Models__NS__ClassTypeKey, Models__NS__ConnectionOptionsLogs, Models__NS__ContextOptions, Models__NS__DatabaseConfig, Models__NS__DatabaseConfigTypeOrm, Models__NS__DatabasesFolder, Models__NS__DBRecreateMode, Models__NS__DBRecreateModeType, Models__NS__FrameworkMode, Models__NS__Http__NS__AsyncResponse, Models__NS__Http__NS__AuthCallBack, Models__NS__Http__NS__ClientAction, Models__NS__Http__NS__ContextENDPOINT, Models__NS__Http__NS__ExpressContext, Models__NS__Http__NS__FormlyFromType, Models__NS__Http__NS__MixResponse, Models__NS__Http__NS__PromiseObservableMix, Models__NS__Http__NS__RequestResults, Models__NS__Http__NS__Response, Models__NS__Http__NS__ResponseFuncOpt, Models__NS__Http__NS__SyncResponse, Models__NS__Http__NS__SyncResponseFunc, Models__NS__Http__NS__TaonStreamResponseOptions, Models__NS__KVDatabaseConfig, Models__NS__MiddlewareType, Models__NS__StartParams, Models__NS__TaonCtrlBeforeEachRequestParams, Models__NS__TaonCtxCloneParams, Models__NS__TaonInitializeParams, Taon__NS____FILE_RELATIVE_PATH, Taon__NS__asset, Taon__NS__assetsFrom, Taon__NS__assetsListFrom, Taon__NS__createContext, Taon__NS__createContextTemplate, Taon__NS__error, Taon__NS__getResponseValue, Taon__NS__isBrowser, Taon__NS__isElectron, Taon__NS__isNode, Taon__NS__isWebSQL, Taon__NS__LANG_IMPORT_MAP, Taon__NS__removeLoader, Taon__NS__Response, Taon__NS__ResponseHtml, Taon__NS__StartParams } from 'taon/websql-prod';
+import { TaonAuthContextRepository, TaonSessionRepository, TaonSessionUserEntity, } from '@taon-dev/session/websql-prod';
+import { TaonCmsContentEntity } from '../taon-cms-content/taon-cms-content.entity';
+import { TaonCmsContentRepository } from '../taon-cms-content/taon-cms-content.repository';
+import { TaonCmsCommentBlockedPhraseEntity } from './taon-cms-comment-blocked-phrase.entity';
+import { TaonCmsCommentBlockedUserEntity } from './taon-cms-comment-blocked-user.entity';
 import { TaonCmsCommentEntity } from './taon-cms-comment.entity';
-import { TaonCmsCommentRepository } from './taon-cms-comment.repository';
+import { TaonCmsCommentSpamReportEntity } from './taon-cms-comment-spam-report.entity';
+import { TaonCmsCommentVoteEntity } from './taon-cms-comment-vote.entity';
+interface CreateCommentInput {
+    contentId: number;
+    body: string;
+}
+interface VoteInput {
+    commentId: number;
+    value: -1 | 1;
+}
+interface BlockedUserInput {
+    userId: number;
+    blocked: boolean;
+}
+export interface CommentListItem extends TaonCmsCommentEntity {
+    voteScore: number;
+    upvotes: number;
+    downvotes: number;
+    spamReports: number;
+    currentUserVote: -1 | 1 | 0;
+    currentUserReported: boolean;
+    postTitle: string;
+    postSlug: string;
+    authorName: string;
+}
 @TaonController<TaonCmsCommentController>({
     className: 'TaonCmsCommentController',
-    allowedMethods: []
+    allowedMethods: [
+        'getComments',
+        'createComment',
+        'deleteComment',
+        'voteComment',
+        'reportSpam',
+        'getCommentsBackoffice',
+        'getBlockedUsers',
+        'setBlockedUser',
+        'getBlockedPhrases',
+        'addBlockedPhrase',
+        'deleteBlockedPhrase',
+    ],
 })
 export class TaonCmsCommentController extends TaonBaseCrudController<TaonCmsCommentEntity> {
     entityClassResolveFn: () => typeof TaonCmsCommentEntity = () => TaonCmsCommentEntity;
-    taonCmsCommentRepository = this.injectCustomRepo(TaonCmsCommentRepository);
+    private readonly taonSessionRepository = this.injectCustomRepo(TaonSessionRepository);
+    private readonly taonAuthContextRepository = this.injectCustomRepo(TaonAuthContextRepository);
+    private readonly posts = this.injectCustomRepo(TaonCmsContentRepository);
+    private repository<T>(entity: {
+        new (): T;
+    }) {
+        return this.ctx.connection.manager.getRepository(entity);
+    }
+    private async requireAuthenticated(req: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['req'], res: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['res'], t: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['t']): Promise<number> {
+        await this.taonSessionRepository.throwIfNotAuthenticated({ req, res });
+        const userId = Number(req.userId);
+        if (!Number.isSafeInteger(userId) || userId <= 0) {
+            Taon__NS__error({
+                status: getStatusCode(HttpStatusEnum.UNAUTHORIZED),
+                message: t.gettext('Authentication is required to comment.'),
+            });
+        }
+        return userId;
+    }
+    private async requireCmsManager(req: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['req'], t: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['t']): Promise<void> {
+        await this.taonSessionRepository.throwIfNotAuthenticated({ req });
+        const context = await this.taonAuthContextRepository.getContext(req.userId, req.sessionId);
+        if (!context?.hasAccess?.toManageCms) {
+            Taon__NS__error({
+                status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                message: t.gettext("You can't manage CMS comments."),
+            });
+        }
+    }
+    @GET()
+    getComments(
+    @Query('contentId')
+    contentId: number): Taon__NS__Response<CommentListItem[]> {
+        return async (req, res, { t }) => {
+            const id = Number(contentId);
+            if (!Number.isSafeInteger(id) || id <= 0) {
+                return [];
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id },
+            });
+            if (!post) {
+                return [];
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const currentUserId = Number(req.userId) || 0;
+            const comments = await this.db.find({
+                where: { contentId: id, status: 'published' },
+                order: { createdAt: 'ASC' },
+            });
+            return this.withModerationData(comments, currentUserId);
+        };
+    }
+    @POST()
+    createComment(
+    @Body()
+    input: CreateCommentInput): Taon__NS__Response<CommentListItem> {
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            const contentId = Number(input?.contentId);
+            const body = typeof input?.body === 'string' ? input.body.trim() : '';
+            if (!Number.isSafeInteger(contentId) || contentId <= 0 || !body) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('A post and comment text are required.'),
+                });
+            }
+            if (body.length > 500) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Comments cannot exceed 500 characters.'),
+                });
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id: contentId },
+            });
+            if (!post) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The post was not found.'),
+                });
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const blockedUser = await this.repository(TaonCmsCommentBlockedUserEntity).findOne({ where: { userId } });
+            if (blockedUser) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                    message: t.gettext('Your account is not allowed to comment.'),
+                });
+            }
+            const blockedPhrases = await this.repository(TaonCmsCommentBlockedPhraseEntity).find();
+            const lowerBody = body.toLowerCase();
+            if (blockedPhrases.some(phrase => lowerBody.includes(phrase.normalizedPhrase))) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Your comment contains a blocked word or phrase.'),
+                });
+            }
+            const dayStart = new Date();
+            dayStart.setHours(0, 0, 0, 0);
+            const tomorrow = new Date(dayStart);
+            tomorrow.setDate(tomorrow.getDate() + 1);
+            const commentsToday = await this.db
+                .createQueryBuilder('comment')
+                .where('comment.userId = :userId', { userId })
+                .andWhere('comment.createdAt >= :dayStart', { dayStart })
+                .andWhere('comment.createdAt < :tomorrow', { tomorrow })
+                .getCount();
+            if (commentsToday >= 50) {
+                Taon__NS__error({
+                    status: 429,
+                    message: t.gettext('You have reached the limit of 50 comments per day.'),
+                });
+            }
+            const comment = await this.db.save(this.db.create({
+                contentId,
+                parentCommentId: null,
+                userId,
+                body,
+                status: 'published',
+            }));
+            return (await this.withModerationData([comment], userId))[0];
+        };
+    }
+    @DELETE()
+    deleteComment(
+    @Query('id')
+    commentId: number): Taon__NS__Response<boolean> {
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            const comment = await this.db.findOne({ where: { id: commentId } });
+            if (!comment) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The comment was not found.'),
+                });
+            }
+            const context = await this.taonAuthContextRepository.getContext(req.userId, req.sessionId);
+            if (comment.userId !== userId && !context?.hasAccess?.toManageCms) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                    message: t.gettext('You are not allowed to delete this comment.'),
+                });
+            }
+            await this.repository(TaonCmsCommentVoteEntity).delete({ commentId });
+            await this.repository(TaonCmsCommentSpamReportEntity).delete({
+                commentId,
+            });
+            await this.db.remove(comment);
+            return true;
+        };
+    }
+    @POST()
+    voteComment(
+    @Body()
+    input: VoteInput): Taon__NS__Response<CommentListItem> {
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            if (!Number.isSafeInteger(Number(input?.commentId)) ||
+                (input.value !== -1 && input.value !== 1)) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Choose a valid comment vote.'),
+                });
+            }
+            const commentId = Number(input.commentId);
+            const comment = await this.db.findOne({ where: { id: commentId } });
+            if (!comment) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The comment was not found.'),
+                });
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id: comment.contentId },
+            });
+            if (!post) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The post was not found.'),
+                });
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const votes = this.repository(TaonCmsCommentVoteEntity);
+            const existing = await votes.findOne({ where: { commentId, userId } });
+            if (existing?.value === input.value) {
+                await votes.remove(existing);
+            }
+            else if (existing) {
+                existing.value = input.value;
+                await votes.save(existing);
+            }
+            else {
+                await votes.save(votes.create({ commentId, userId, value: input.value }));
+            }
+            return (await this.withModerationData([comment], userId))[0];
+        };
+    }
+    @POST()
+    reportSpam(
+    @Body('commentId')
+    commentId: number): Taon__NS__Response<boolean> {
+        return async (req, res, { t }) => {
+            const userId = await this.requireAuthenticated(req, res, t);
+            const id = Number(commentId);
+            if (!Number.isSafeInteger(id) || id <= 0) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('A valid comment is required.'),
+                });
+            }
+            const comment = await this.db.findOne({ where: { id } });
+            if (!comment) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The comment was not found.'),
+                });
+            }
+            const post = await this.repository(TaonCmsContentEntity).findOne({
+                where: { id: comment.contentId },
+            });
+            if (!post) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The post was not found.'),
+                });
+            }
+            await this.requirePostReadAccess(post, req, res, t);
+            const reports = this.repository(TaonCmsCommentSpamReportEntity);
+            const existing = await reports.findOne({
+                where: { commentId: id, userId },
+            });
+            if (!existing) {
+                await reports.save(reports.create({ commentId: id, userId }));
+            }
+            return true;
+        };
+    }
+    @GET()
+    getCommentsBackoffice(
+    @Query('pageNumber')
+    pageNumber = 1, 
+    @Query('pageSize')
+    pageSize = 10, 
+    @Query('id')
+    id?: string, 
+    @Query('text')
+    text?: string, 
+    @Query('author')
+    author?: string): Taon__NS__Response<{
+        items: CommentListItem[];
+        total: number;
+    }> {
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const page = Math.max(1, Number(pageNumber) || 1);
+            const size = Math.min(100, Math.max(1, Number(pageSize) || 10));
+            const query = this.db.createQueryBuilder('comment');
+            if (id?.trim()) {
+                const commentId = Number(id.trim());
+                query.andWhere('comment.id = :id', {
+                    id: Number.isSafeInteger(commentId) && commentId > 0 ? commentId : -1,
+                });
+            }
+            if (text?.trim()) {
+                query.andWhere('LOWER(comment.body) LIKE :text', {
+                    text: `%${text.trim().toLowerCase()}%`,
+                });
+            }
+            if (author?.trim()) {
+                query
+                    .leftJoin(TaonSessionUserEntity, 'sessionUser', 'sessionUser.id = comment.userId')
+                    .andWhere('(LOWER(sessionUser.username) LIKE :author OR CAST(comment.userId AS TEXT) LIKE :author)', { author: `%${author.trim().toLowerCase()}%` });
+            }
+            query.orderBy('comment.createdAt', 'DESC');
+            query.skip((page - 1) * size).take(size);
+            const [comments, total] = await query.getManyAndCount();
+            return {
+                items: await this.withModerationData(comments, Number(req.userId) || 0),
+                total,
+            };
+        };
+    }
+    @GET()
+    getBlockedUsers(): Taon__NS__Response<TaonCmsCommentBlockedUserEntity[]> {
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            return this.repository(TaonCmsCommentBlockedUserEntity).find({
+                order: { createdAt: 'DESC' },
+            });
+        };
+    }
+    @POST()
+    setBlockedUser(
+    @Body()
+    input: BlockedUserInput): Taon__NS__Response<boolean> {
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const userId = Number(input?.userId);
+            if (!Number.isSafeInteger(userId) ||
+                userId <= 0 ||
+                typeof input?.blocked !== 'boolean') {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('A valid user ID and blocked status are required.'),
+                });
+            }
+            if (input.blocked) {
+                const user = await this.repository(TaonSessionUserEntity).findOne({
+                    where: { id: userId },
+                });
+                if (!user) {
+                    Taon__NS__error({
+                        status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                        message: t.gettext('The user was not found.'),
+                    });
+                }
+            }
+            const blockedUsers = this.repository(TaonCmsCommentBlockedUserEntity);
+            const existing = await blockedUsers.findOne({ where: { userId } });
+            if (input.blocked && !existing) {
+                await blockedUsers.save(blockedUsers.create({ userId }));
+            }
+            else if (!input.blocked && existing) {
+                await blockedUsers.remove(existing);
+            }
+            return true;
+        };
+    }
     @GET()
-    helloWord(
-    @Query('yourName')
-    yourName: string): Taon__NS__Response<string> {
-        return async (req, res) => {
-            const numOfEntities = await this.db.count();
-            const numberOfEvenEntities = await this.taonCmsCommentRepository.countEntitesWithEvenId();
-            return `Hello ${yourName || 'world'} from ${ClassHelpers__NS__getName(TaonCmsCommentController)}
-      controller..  ${numOfEntities} entites in db..
-      ${numberOfEvenEntities} entites with even ids (2,4,6,8 etc.)
-      `;
+    getBlockedPhrases(): Taon__NS__Response<TaonCmsCommentBlockedPhraseEntity[]> {
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            return this.repository(TaonCmsCommentBlockedPhraseEntity).find({
+                order: { phrase: 'ASC' },
+            });
+        };
+    }
+    @POST()
+    addBlockedPhrase(
+    @Body('phrase')
+    phrase: string): Taon__NS__Response<TaonCmsCommentBlockedPhraseEntity> {
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const normalizedPhrase = typeof phrase === 'string' ? phrase.trim().toLowerCase() : '';
+            const displayPhrase = typeof phrase === 'string' ? phrase.trim() : '';
+            if (!displayPhrase || displayPhrase.length > 500) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.BAD_REQUEST),
+                    message: t.gettext('Enter a word or phrase of at most 500 characters.'),
+                });
+            }
+            const phrases = this.repository(TaonCmsCommentBlockedPhraseEntity);
+            const existing = await phrases.findOne({ where: { normalizedPhrase } });
+            if (existing) {
+                return existing;
+            }
+            return phrases.save(phrases.create({ phrase: displayPhrase, normalizedPhrase }));
         };
     }
+    @DELETE()
+    deleteBlockedPhrase(
+    @Query('id')
+    id: number): Taon__NS__Response<boolean> {
+        return async (req, _res, { t }) => {
+            await this.requireCmsManager(req, t);
+            const phrase = await this.repository(TaonCmsCommentBlockedPhraseEntity).findOne({ where: { id } });
+            if (!phrase) {
+                Taon__NS__error({
+                    status: getStatusCode(HttpStatusEnum.NOT_FOUND),
+                    message: t.gettext('The blocked phrase was not found.'),
+                });
+            }
+            await this.repository(TaonCmsCommentBlockedPhraseEntity).remove(phrase);
+            return true;
+        };
+    }
+    private async requirePostReadAccess(post: TaonCmsContentEntity, req: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['req'], res: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['res'], t: Models__NS__TaonCtrlBeforeEachRequestParams<TaonCmsCommentController>['t']): Promise<void> {
+        const { permissions } = await this.posts.getPermissionConfiguration(post.id, true);
+        const isPublic = post.status === 'published' && permissions.length === 0;
+        if (isPublic) {
+            return;
+        }
+        await this.taonSessionRepository.throwIfNotAuthenticated({ req, res });
+        const context = await this.taonAuthContextRepository.getContext(req.userId, req.sessionId);
+        const userPermissions = new Set(context?.permissions ?? []);
+        if (!context?.isSuperUser &&
+            !permissions.some(permission => userPermissions.has(permission.code))) {
+            Taon__NS__error({
+                status: getStatusCode(HttpStatusEnum.FORBIDDEN),
+                message: t.gettext('You do not have access to this post.'),
+            });
+        }
+    }
+    private async withModerationData(comments: TaonCmsCommentEntity[], currentUserId: number): Promise<CommentListItem[]> {
+        const voteRepository = this.repository(TaonCmsCommentVoteEntity);
+        const reportRepository = this.repository(TaonCmsCommentSpamReportEntity);
+        return Promise.all(comments.map(async (comment) => {
+            const [votes, reports, post, user] = await Promise.all([
+                voteRepository.find({ where: { commentId: comment.id } }),
+                reportRepository.find({ where: { commentId: comment.id } }),
+                this.repository(TaonCmsContentEntity).findOne({
+                    where: { id: comment.contentId },
+                }),
+                this.repository(TaonSessionUserEntity).findOne({
+                    where: { id: comment.userId },
+                }),
+            ]);
+            const upvotes = votes.filter(vote => vote.value === 1).length;
+            const downvotes = votes.filter(vote => vote.value === -1).length;
+            return Object.assign(new TaonCmsCommentEntity(), comment, {
+                upvotes,
+                downvotes,
+                voteScore: upvotes - downvotes,
+                spamReports: reports.length,
+                currentUserVote: votes.find(vote => vote.userId === currentUserId)?.value ?? 0,
+                currentUserReported: reports.some(report => report.userId === currentUserId),
+                postTitle: post?.title ?? '',
+                postSlug: post?.slug ?? '',
+                authorName: user?.username?.trim() || `User #${comment.userId}`,
+            }) as CommentListItem;
+        }));
+    }
 }

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comment.entity.ts

@@ -10,7 +10,7 @@
   
  * ========================================================================== */
 
-import { Column, CustomColumn, PrimaryGeneratedColumn, TaonBaseAbstractEntity, TaonBaseEntity, TaonEntity, Taon__NS____FILE_RELATIVE_PATH, Taon__NS__asset, Taon__NS__assetsFrom, Taon__NS__assetsListFrom, Taon__NS__createContext, Taon__NS__createContextTemplate, Taon__NS__error, Taon__NS__getResponseValue, Taon__NS__isBrowser, Taon__NS__isElectron, Taon__NS__isNode, Taon__NS__isWebSQL, Taon__NS__LANG_IMPORT_MAP, Taon__NS__removeLoader, Taon__NS__Response, Taon__NS__ResponseHtml, Taon__NS__StartParams } from 'taon/websql-prod';
+import { Column, CreateDateColumn, CustomColumn, PrimaryGeneratedColumn, TaonBaseAbstractEntity, TaonBaseEntity, TaonEntity, UpdateDateColumn, Taon__NS____FILE_RELATIVE_PATH, Taon__NS__asset, Taon__NS__assetsFrom, Taon__NS__assetsListFrom, Taon__NS__createContext, Taon__NS__createContextTemplate, Taon__NS__error, Taon__NS__getResponseValue, Taon__NS__isBrowser, Taon__NS__isElectron, Taon__NS__isNode, Taon__NS__isWebSQL, Taon__NS__LANG_IMPORT_MAP, Taon__NS__removeLoader, Taon__NS__Response, Taon__NS__ResponseHtml, Taon__NS__StartParams } from 'taon/websql-prod';
 import { ___NS__add, ___NS__after, ___NS__ary, ___NS__assign, ___NS__assignIn, ___NS__assignInWith, ___NS__assignWith, ___NS__at, ___NS__attempt, ___NS__before, ___NS__bind, ___NS__bindAll, ___NS__bindKey, ___NS__camelCase, ___NS__capitalize, ___NS__castArray, ___NS__ceil, ___NS__chain, ___NS__chunk, ___NS__clamp, ___NS__clone, ___NS__cloneDeep, ___NS__cloneDeepWith, ___NS__cloneWith, ___NS__compact, ___NS__concat, ___NS__cond, ___NS__conforms, ___NS__conformsTo, ___NS__constant, ___NS__countBy, ___NS__create, ___NS__curry, ___NS__curryRight, ___NS__debounce, ___NS__deburr, ___NS__defaults, ___NS__defaultsDeep, ___NS__defaultTo, ___NS__defer, ___NS__delay, ___NS__difference, ___NS__differenceBy, ___NS__differenceWith, ___NS__divide, ___NS__drop, ___NS__dropRight, ___NS__dropRightWhile, ___NS__dropWhile, ___NS__each, ___NS__eachRight, ___NS__endsWith, ___NS__entries, ___NS__entriesIn, ___NS__eq, ___NS__escape, ___NS__escapeRegExp, ___NS__every, ___NS__extend, ___NS__extendWith, ___NS__fill, ___NS__filter, ___NS__find, ___NS__findIndex, ___NS__findKey, ___NS__findLast, ___NS__findLastIndex, ___NS__findLastKey, ___NS__first, ___NS__flatMap, ___NS__flatMapDeep, ___NS__flatMapDepth, ___NS__flatten, ___NS__flattenDeep, ___NS__flattenDepth, ___NS__flip, ___NS__floor, ___NS__flow, ___NS__flowRight, ___NS__forEach, ___NS__forEachRight, ___NS__forIn, ___NS__forInRight, ___NS__forOwn, ___NS__forOwnRight, ___NS__fromPairs, ___NS__functions, ___NS__functionsIn, ___NS__get, ___NS__groupBy, ___NS__gt, ___NS__gte, ___NS__has, ___NS__hasIn, ___NS__head, ___NS__identity, ___NS__includes, ___NS__indexOf, ___NS__initial, ___NS__inRange, ___NS__intersection, ___NS__intersectionBy, ___NS__intersectionWith, ___NS__invert, ___NS__invertBy, ___NS__invoke, ___NS__invokeMap, ___NS__isArguments, ___NS__isArray, ___NS__isArrayBuffer, ___NS__isArrayLike, ___NS__isArrayLikeObject, ___NS__isBoolean, ___NS__isBuffer, ___NS__isDate, ___NS__isElement, ___NS__isEmpty, ___NS__isEqual, ___NS__isEqualWith, ___NS__isError, ___NS__isFinite, ___NS__isFunction, ___NS__isInteger, ___NS__isLeafObject, ___NS__isLength, ___NS__isMap, ___NS__isMatch, ___NS__isMatchWith, ___NS__isNaN, ___NS__isNative, ___NS__isNil, ___NS__isNull, ___NS__isNumber, ___NS__isObject, ___NS__isObjectLike, ___NS__isPlainObject, ___NS__isRegExp, ___NS__isSafeInteger, ___NS__isSet, ___NS__isString, ___NS__isSymbol, ___NS__isTypedArray, ___NS__isUndefined, ___NS__isWeakMap, ___NS__isWeakSet, ___NS__iteratee, ___NS__join, ___NS__kebabCase, ___NS__keyBy, ___NS__keys, ___NS__keysIn, ___NS__last, ___NS__lastIndexOf, ___NS__lowerCase, ___NS__lowerFirst, ___NS__lt, ___NS__lte, ___NS__map, ___NS__mapKeys, ___NS__mapValues, ___NS__matches, ___NS__matchesProperty, ___NS__max, ___NS__maxBy, ___NS__mean, ___NS__meanBy, ___NS__memoize, ___NS__merge, ___NS__mergeWith, ___NS__method, ___NS__methodOf, ___NS__min, ___NS__minBy, ___NS__mixin, ___NS__multiply, ___NS__negate, ___NS__noop, ___NS__now, ___NS__nth, ___NS__nthArg, ___NS__omit, ___NS__omitBy, ___NS__once, ___NS__orderBy, ___NS__over, ___NS__overArgs, ___NS__overEvery, ___NS__overSome, ___NS__pad, ___NS__padEnd, ___NS__padStart, ___NS__parseInt, ___NS__partial, ___NS__partialRight, ___NS__partition, ___NS__pick, ___NS__pickBy, ___NS__property, ___NS__propertyOf, ___NS__pull, ___NS__pullAll, ___NS__pullAllBy, ___NS__pullAllWith, ___NS__pullAt, ___NS__random, ___NS__range, ___NS__rangeRight, ___NS__rearg, ___NS__reduce, ___NS__reduceRight, ___NS__reject, ___NS__remove, ___NS__repeat, ___NS__replace, ___NS__rest, ___NS__result, ___NS__reverse, ___NS__round, ___NS__sample, ___NS__sampleSize, ___NS__set, ___NS__setWith, ___NS__shuffle, ___NS__size, ___NS__slice, ___NS__snakeCase, ___NS__some, ___NS__sortBy, ___NS__sortedIndex, ___NS__sortedIndexBy, ___NS__sortedIndexOf, ___NS__sortedLastIndex, ___NS__sortedLastIndexBy, ___NS__sortedLastIndexOf, ___NS__sortedUniq, ___NS__sortedUniqBy, ___NS__split, ___NS__spread, ___NS__startCase, ___NS__startsWith, ___NS__stubArray, ___NS__stubFalse, ___NS__stubObject, ___NS__stubString, ___NS__stubTrue, ___NS__subtract, ___NS__sum, ___NS__sumBy, ___NS__tail, ___NS__take, ___NS__takeRight, ___NS__takeRightWhile, ___NS__takeWhile, ___NS__tap, ___NS__template, ___NS__templateSettings, ___NS__throttle, ___NS__thru, ___NS__times, ___NS__toArray, ___NS__toFinite, ___NS__toInteger, ___NS__toLength, ___NS__toLower, ___NS__toNumber, ___NS__toPairs, ___NS__toPairsIn, ___NS__toPath, ___NS__toPlainObject, ___NS__toSafeInteger, ___NS__toString, ___NS__toUpper, ___NS__transform, ___NS__trim, ___NS__trimEnd, ___NS__trimStart, ___NS__truncate, ___NS__unary, ___NS__unescape, ___NS__union, ___NS__unionBy, ___NS__unionWith, ___NS__uniq, ___NS__uniqBy, ___NS__uniqueId, ___NS__uniqWith, ___NS__unset, ___NS__unzip, ___NS__unzipWith, ___NS__update, ___NS__updateWith, ___NS__upperCase, ___NS__upperFirst, ___NS__values, ___NS__valuesIn, ___NS__without, ___NS__words, ___NS__wrap, ___NS__xor, ___NS__xorBy, ___NS__xorWith, ___NS__zip, ___NS__zipObject, ___NS__zipObjectDeep, ___NS__zipWith } from 'tnp-core/websql-prod';
 import { TaonCmsCommentDefaultsValues } from './taon-cms-comment.constants';
 @TaonEntity({
@@ -32,8 +32,8 @@ export class TaonCmsCommentEntity extends TaonBaseEntity<TaonCmsCommentEntity> {
     body: string;
     @Column({ type: 'varchar', default: 'published' })
     status: string;
-    @Column({ type: 'datetime' })
+    @CreateDateColumn()
     createdAt: Date;
-    @Column({ type: 'datetime' })
+    @UpdateDateColumn()
     updatedAt: Date;
 }

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comments-backoffice/i18n/taon-cms-comments-backoffice.component.ts.de-DE.i18n.data.ts

@@ -0,0 +1,19 @@
+// @ts-nocheck
+/* ============================================================================
+
+- TAON READONLY SOURCE
+- DO NOT MODIFY THIS FILE.
+- Changes may be overwritten.
+- Use command: taon build:watch:lib
+  inside @taon-dev/cms project repository
+  for watch development of third party modules like this.
+  
+ * ========================================================================== */
+
+export interface DeDeTraslationOverrideSrcLibTaonCmsCommentTaonCmsCommentsBackofficeTaonCmsCommentsBackofficeComponentTs {
+    "de-DE": {};
+}
+export default {
+    "fileRelativePath": "src/lib/taon-cms-comment/taon-cms-comments-backoffice/taon-cms-comments-backoffice.component.ts",
+    "tags": []
+};

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comments-backoffice/i18n/taon-cms-comments-backoffice.component.ts.de-DE.po

@@ -0,0 +1,5 @@
+msgid ""
+msgstr ""
+"Language: de-DE\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comments-backoffice/i18n/taon-cms-comments-backoffice.component.ts.en-US.i18n.data.ts

@@ -0,0 +1,19 @@
+// @ts-nocheck
+/* ============================================================================
+
+- TAON READONLY SOURCE
+- DO NOT MODIFY THIS FILE.
+- Changes may be overwritten.
+- Use command: taon build:watch:lib
+  inside @taon-dev/cms project repository
+  for watch development of third party modules like this.
+  
+ * ========================================================================== */
+
+export interface EnUsTraslationOverrideSrcLibTaonCmsCommentTaonCmsCommentsBackofficeTaonCmsCommentsBackofficeComponentTs {
+    "en-US": {};
+}
+export default {
+    "fileRelativePath": "src/lib/taon-cms-comment/taon-cms-comments-backoffice/taon-cms-comments-backoffice.component.ts",
+    "tags": []
+};

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comments-backoffice/i18n/taon-cms-comments-backoffice.component.ts.en-US.po

@@ -0,0 +1,5 @@
+msgid ""
+msgstr ""
+"Language: en-US\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comments-backoffice/i18n/taon-cms-comments-backoffice.component.ts.pl-PL.i18n.data.ts

@@ -0,0 +1,19 @@
+// @ts-nocheck
+/* ============================================================================
+
+- TAON READONLY SOURCE
+- DO NOT MODIFY THIS FILE.
+- Changes may be overwritten.
+- Use command: taon build:watch:lib
+  inside @taon-dev/cms project repository
+  for watch development of third party modules like this.
+  
+ * ========================================================================== */
+
+export interface PlPlTraslationOverrideSrcLibTaonCmsCommentTaonCmsCommentsBackofficeTaonCmsCommentsBackofficeComponentTs {
+    "pl-PL": {};
+}
+export default {
+    "fileRelativePath": "src/lib/taon-cms-comment/taon-cms-comments-backoffice/taon-cms-comments-backoffice.component.ts",
+    "tags": []
+};

package/ts-source/websql-code-prod/taon-cms-comment/taon-cms-comments-backoffice/i18n/taon-cms-comments-backoffice.component.ts.pl-PL.po

@@ -0,0 +1,5 @@
+msgid ""
+msgstr ""
+"Language: pl-PL\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"