rhythia-api 236.0.0 → 237.0.0

package/api/getCollection.ts

@@ -9,16 +9,17 @@ export const Schema = {
     collection: z.number(),
   }),
   output: z.object({
-    collection: z.object({
-      title: z.string(),
-      description: z.string(),
-      owner: z.object({
-        id: z.number(),
-        username: z.string(),
-      }),
-      isList: z.boolean(),
-      beatmaps: z.array(
-        z.object({
+    collection: z.object({
+      title: z.string(),
+      description: z.string(),
+      owner: z.object({
+        id: z.number(),
+        username: z.string(),
+        avatar_url: z.string().nullable(),
+      }),
+      isList: z.boolean(),
+      beatmaps: z.array(
+        z.object({
           id: z.number(),
           playcount: z.number().nullable().optional(),
           created_at: z.string().nullable().optional(),
@@ -54,13 +55,14 @@ export async function handler(data: (typeof Schema)["input"]["_type"]) {
     .from("beatmapCollections")
     .select(
       `
-      *,
-      profiles!inner(
-        id,
-        username
-      )
-      `
-    )
+      *,
+      profiles!inner(
+        id,
+        username,
+        avatar_url
+      )
+      `
+    )
     .eq("id", data.collection)
     .single();
 
@@ -117,12 +119,13 @@ export async function handler(data: (typeof Schema)["input"]["_type"]) {
 
   return NextResponse.json({
     collection: {
-      owner: {
-        username: queryCollectionData.profiles.username,
-        id: queryCollectionData.profiles.id,
-      },
-      isList: queryCollectionData.is_list,
-      title: queryCollectionData.title,
+      owner: {
+        username: queryCollectionData.profiles.username,
+        id: queryCollectionData.profiles.id,
+        avatar_url: queryCollectionData.profiles.avatar_url,
+      },
+      isList: queryCollectionData.is_list,
+      title: queryCollectionData.title,
       description: queryCollectionData.description,
       beatmaps: formattedBeatmaps,
     },

package/api/reportProfile.ts

@@ -4,6 +4,7 @@ import { protectedApi, validUser } from "../utils/requestUtils";
 import { supabase } from "../utils/supabase";
 import { getUserBySession } from "../utils/getUserBySession";
 import { User } from "@supabase/supabase-js";
+import { postProfileReportWebhook } from "../utils/profileReportWebhook";
 
 const MAX_DESCRIPTION_LENGTH = 1000;
 
@@ -50,7 +51,7 @@ export async function handler({
   const user = (await getUserBySession(session)) as User;
   const { data: reporterProfile } = await supabase
     .from("profiles")
-    .select("id,ban")
+    .select("id,ban,username,computedUsername,avatar_url")
     .eq("uid", user.id)
     .single();
 
@@ -68,7 +69,7 @@ export async function handler({
 
   const { data: reportedProfile } = await supabase
     .from("profiles")
-    .select("id")
+    .select("id,username,computedUsername,avatar_url")
     .eq("id", profileId)
     .single();
 
@@ -83,12 +84,20 @@ export async function handler({
       reported: reportedProfile.id,
       description: trimmedDescription,
     })
-    .select("id")
+    .select("id,created_at")
     .single();
 
   if (insertResult.error) {
     return NextResponse.json({ error: insertResult.error.message });
   }
 
+  await postProfileReportWebhook({
+    reportId: insertResult.data.id,
+    reporter: reporterProfile,
+    reported: reportedProfile,
+    description: trimmedDescription,
+    createdAt: insertResult.data.created_at,
+  });
+
   return NextResponse.json({ id: insertResult.data?.id });
 }

package/index.ts

@@ -773,16 +773,17 @@ export const Schema = {
     collection: z.number(),
   }),
   output: z.object({
-    collection: z.object({
-      title: z.string(),
-      description: z.string(),
-      owner: z.object({
-        id: z.number(),
-        username: z.string(),
-      }),
-      isList: z.boolean(),
-      beatmaps: z.array(
-        z.object({
+    collection: z.object({
+      title: z.string(),
+      description: z.string(),
+      owner: z.object({
+        id: z.number(),
+        username: z.string(),
+        avatar_url: z.string().nullable(),
+      }),
+      isList: z.boolean(),
+      beatmaps: z.array(
+        z.object({
           id: z.number(),
           playcount: z.number().nullable().optional(),
           created_at: z.string().nullable().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rhythia-api",
-  "version": "236.0.0",
+  "version": "237.0.0",
   "main": "index.ts",
   "author": "online-contributors-cunev",
   "scripts": {

package/utils/profileReportWebhook.ts

@@ -0,0 +1,180 @@
+type ProfileReportWebhookProfile = {
+  id: number;
+  username: string | null;
+  computedUsername: string | null;
+  avatar_url: string | null;
+};
+
+function clampText(value: string, maxLength: number) {
+  const sanitized = value.replace(
+    /[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/g,
+    ""
+  );
+
+  if (sanitized.length <= maxLength) {
+    return sanitized;
+  }
+
+  if (maxLength <= 3) {
+    return sanitized.slice(0, maxLength);
+  }
+
+  return `${sanitized.slice(0, maxLength - 3)}...`;
+}
+
+function getSafeHttpUrl(value: string | null | undefined) {
+  if (!value) {
+    return null;
+  }
+
+  try {
+    const parsed = new URL(value.trim());
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+      return null;
+    }
+
+    const serialized = parsed.toString();
+    if (serialized.length > 2048) {
+      return null;
+    }
+
+    return serialized;
+  } catch {
+    return null;
+  }
+}
+
+function getDisplayName(profile: ProfileReportWebhookProfile) {
+  return (
+    profile.username ||
+    profile.computedUsername ||
+    `User #${profile.id}`
+  );
+}
+
+function getPlayerUrl(profileId: number) {
+  return `https://www.rhythia.com/player/${profileId}`;
+}
+
+export async function postProfileReportWebhook({
+  reportId,
+  reporter,
+  reported,
+  description,
+  createdAt,
+}: {
+  reportId: number;
+  reporter: ProfileReportWebhookProfile;
+  reported: ProfileReportWebhookProfile;
+  description: string;
+  createdAt?: string;
+}) {
+  const webhookUrl = process.env.DISCORD_REPORT_WEBHOOK_URL;
+  if (!webhookUrl) {
+    return;
+  }
+
+  try {
+    const reporterName = getDisplayName(reporter);
+    const reportedName = getDisplayName(reported);
+    const safeReporterAvatarUrl = getSafeHttpUrl(reporter.avatar_url);
+    const safeReportedAvatarUrl = getSafeHttpUrl(reported.avatar_url);
+
+    const embed: Record<string, any> = {
+      title: clampText(`Profile Report #${reportId}`, 256),
+      description: clampText(description, 4096),
+      color: 0xe67e22,
+      fields: [
+        {
+          name: "Reported Player",
+          value: clampText(
+            `${reportedName} (#${reported.id})\n${getPlayerUrl(reported.id)}`,
+            1024
+          ),
+          inline: true,
+        },
+        {
+          name: "Reporter",
+          value: clampText(
+            `${reporterName} (#${reporter.id})\n${getPlayerUrl(reporter.id)}`,
+            1024
+          ),
+          inline: true,
+        },
+        {
+          name: "Submitted At",
+          value: clampText(
+            new Date(createdAt || Date.now()).toUTCString(),
+            1024
+          ),
+          inline: true,
+        },
+      ],
+      author: {
+        name: clampText(reporterName, 256),
+        url: getPlayerUrl(reporter.id),
+        icon_url: safeReporterAvatarUrl || "https://www.rhythia.com/unkimg.png",
+      },
+      footer: {
+        text: clampText(
+          `Reported player: ${reportedName} | Report ID: ${reportId}`,
+          2048
+        ),
+      },
+    };
+
+    if (safeReportedAvatarUrl) {
+      embed.thumbnail = {
+        url: safeReportedAvatarUrl,
+      };
+    }
+
+    const payload = {
+      content: "New player report submitted.",
+      embeds: [embed],
+    };
+
+    let response = await fetch(webhookUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify(payload),
+    });
+
+    if (
+      !response.ok &&
+      response.status === 400 &&
+      payload.embeds?.[0]?.thumbnail?.url
+    ) {
+      const retryPayload = {
+        ...payload,
+        embeds: payload.embeds.map((embed: any) => {
+          const clone = { ...embed };
+          delete clone.thumbnail;
+          return clone;
+        }),
+      };
+
+      response = await fetch(webhookUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify(retryPayload),
+      });
+    }
+
+    if (!response.ok) {
+      const responseBody = await response.text();
+      console.log("Discord report webhook failed", {
+        reportId,
+        status: response.status,
+        statusText: response.statusText,
+        responseBody: clampText(responseBody || "-", 4000),
+      });
+    }
+  } catch (error) {
+    console.log("Failed to post profile report webhook", error);
+  }
+}