powr-sdk-api 4.7.1 → 4.7.2

package/dist/routes/comments.js

@@ -41,24 +41,37 @@ router.get("/", async (req, res) => {
 // Create new comment
 router.post("/", async (req, res) => {
   try {
+    var _req$user, _req$user2;
     const {
       contentId,
       comment,
+      files,
       ...customFields
     } = req.body;
-    const projectId = req.projectId; // Use middleware-injected projectId
-
-    if (!contentId || !comment) {
+    const projectId = req.projectId;
+    const userId = (_req$user = req.user) === null || _req$user === void 0 ? void 0 : _req$user.powrId;
+    const userName = (_req$user2 = req.user) === null || _req$user2 === void 0 ? void 0 : _req$user2.fullName;
+    if (!contentId || !comment && (!files || !files.length)) {
       return res.status(400).json({
         success: false,
-        message: "Content ID and comment are required"
+        message: "Content ID and comment (or files) are required"
       });
     }
     const commentData = {
       projectId,
       contentId,
-      comment,
+      comment: comment || "",
+      ...(files && {
+        files
+      }),
       ...customFields,
+      userId,
+      userName: userName || null,
+      createdBy: userId ? {
+        id: userId,
+        _id: userId,
+        name: userName
+      } : null,
       createdAt: new Date()
     };
     const db = await getDb();
@@ -76,4 +89,116 @@ router.post("/", async (req, res) => {
     });
   }
 });
+
+// Update comment (owner only)
+router.patch("/:id", async (req, res) => {
+  try {
+    var _req$user3;
+    const {
+      id
+    } = req.params;
+    const {
+      comment
+    } = req.body;
+    const projectId = req.projectId;
+    const userId = (_req$user3 = req.user) === null || _req$user3 === void 0 ? void 0 : _req$user3.powrId;
+    if (!ObjectId.isValid(id)) {
+      return res.status(400).json({
+        success: false,
+        message: "Invalid comment id"
+      });
+    }
+    if (comment === undefined) {
+      return res.status(400).json({
+        success: false,
+        message: "comment is required"
+      });
+    }
+    const db = await getDb();
+    const existing = await db.collection("comments").findOne({
+      _id: new ObjectId(id),
+      projectId
+    });
+    if (!existing) {
+      return res.status(404).json({
+        success: false,
+        message: "Comment not found"
+      });
+    }
+    if (existing.userId !== userId) {
+      return res.status(403).json({
+        success: false,
+        message: "Not allowed to edit this comment"
+      });
+    }
+    await db.collection("comments").updateOne({
+      _id: new ObjectId(id),
+      projectId
+    }, {
+      $set: {
+        comment,
+        updatedAt: new Date()
+      }
+    });
+    return res.json({
+      success: true,
+      message: "Comment updated"
+    });
+  } catch (error) {
+    console.error("Error updating comment:", error);
+    return res.status(500).json({
+      success: false,
+      message: "Failed to update comment."
+    });
+  }
+});
+
+// Delete comment (owner only)
+router.delete("/:id", async (req, res) => {
+  try {
+    var _req$user4;
+    const {
+      id
+    } = req.params;
+    const projectId = req.projectId;
+    const userId = (_req$user4 = req.user) === null || _req$user4 === void 0 ? void 0 : _req$user4.powrId;
+    if (!ObjectId.isValid(id)) {
+      return res.status(400).json({
+        success: false,
+        message: "Invalid comment id"
+      });
+    }
+    const db = await getDb();
+    const existing = await db.collection("comments").findOne({
+      _id: new ObjectId(id),
+      projectId
+    });
+    if (!existing) {
+      return res.status(404).json({
+        success: false,
+        message: "Comment not found"
+      });
+    }
+    if (existing.userId !== userId) {
+      return res.status(403).json({
+        success: false,
+        message: "Not allowed to delete this comment"
+      });
+    }
+    await db.collection("comments").deleteOne({
+      _id: new ObjectId(id),
+      projectId
+    });
+    return res.json({
+      success: true,
+      message: "Comment deleted"
+    });
+  } catch (error) {
+    console.error("Error deleting comment:", error);
+    return res.status(500).json({
+      success: false,
+      message: "Failed to delete comment."
+    });
+  }
+});
 module.exports = router;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "powr-sdk-api",
-  "version": "4.7.1",
+  "version": "4.7.2",
   "description": "Shared API core library for PowrStack projects. Zero dependencies - works with Express, Next.js API routes, and other frameworks. All features are optional and install only what you need.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",