import type { RequestHandler } from './$types'; import { json, error } from '@sveltejs/kit'; import { z } from 'zod'; import { getDb } from '$lib/server/db'; import { addComment, deleteComment, listComments } from '$lib/server/recipes/actions'; const Schema = z.object({ profile_id: z.number().int().positive(), text: z.string().min(1).max(2000) }); const DeleteSchema = z.object({ comment_id: z.number().int().positive() }); function parseId(raw: string): number { const id = Number(raw); if (!Number.isInteger(id) || id <= 0) error(400, { message: 'Invalid id' }); return id; } export const GET: RequestHandler = async ({ params }) => { const id = parseId(params.id!); return json(listComments(getDb(), id)); }; export const POST: RequestHandler = async ({ params, request }) => { const id = parseId(params.id!); const body = await request.json().catch(() => null); const parsed = Schema.safeParse(body); if (!parsed.success) error(400, { message: 'Invalid body' }); const cid = addComment(getDb(), id, parsed.data.profile_id, parsed.data.text); return json({ id: cid }, { status: 201 }); }; export const DELETE: RequestHandler = async ({ request }) => { const body = await request.json().catch(() => null); const parsed = DeleteSchema.safeParse(body); if (!parsed.success) error(400, { message: 'Invalid body' }); deleteComment(getDb(), parsed.data.comment_id); return json({ ok: true }); };