misc rooms endpoints, friends

apps/api/src/routes/config.ts

@@ -26,13 +26,13 @@ export const configRoutes = new Hono<App>({ strict: false })
 		c.json({
 			ReportBudget: 125,
 			FilterType: 0,
-			SampleRate: 0.025,
+			SampleRate: 1,
 			LogLineCount: 50,
 			CaptureNativeCrashes: 1,
 			AMRThresholdMS: 0,
 			MessageCount: 1000,
 			MessageRegex:
-				"^Cannot set the parent of the GameObject .* while its new parent|^\\\\>\\\\x2010x\\\\:\\\\x20|\\\\'LabelTheme\\\\' contains missing PaletteTheme reference on",
+				"^.*$",
 			VersionRegex: '.*',
 		})
 	)

apps/api/src/routes/images.ts

@@ -6,6 +6,7 @@ import {
 	getImagesByPlayer,
 	getImagesByRoom,
 	getPlayerFeed,
+	getSlideshowImages,
 } from '../images-db'
 import { authedId, unauthorized } from '../http'
 
@@ -133,6 +134,18 @@ export const imageRoutes = new Hono<App>({ strict: false })
 		return c.json(await getPlayerFeed(c.env.DB, playerId, skip, take))
 	})
 
+	// Global slideshow feed — the most recent publicly-listable images (Accessibility
+	// 0 or 1) across all rooms, newest first, each joined to its creator's username
+	// and room name. Auth-gated. Returns `{ Images, ValidTill }`, where ValidTill is a
+	// short (2-minute) cache hint the client refreshes against.
+	.get('/api/images/v1/slideshow', async (c) => {
+		const id = await authedId(c)
+		if (id === null) return unauthorized(c)
+		const Images = await getSlideshowImages(c.env.DB)
+		const ValidTill = new Date(Date.now() + 2 * 60 * 1000).toISOString()
+		return c.json({ Images, ValidTill })
+	})
+
 	// Image metadata by filename. Returns the stored SavedImage record, or 404 when
 	// there's no metadata row for that name.
 	.get('/api/images/v6', async (c) => {

apps/api/src/routes/social.ts

@@ -1,9 +1,92 @@
 import { Hono } from 'hono'
 
+import {
+	acceptFriendRequest,
+	addFriend,
+	getRelationshipsForPlayer,
+	removeFriend,
+	sendFriendRequest,
+} from '../relationships-db'
+import { authedId, unauthorized } from '../http'
+
+import type { Context } from 'hono'
 import type { App } from '../context'
 
+/**
+ * Read the other player's id from a relationship-mutation request. The exact wire
+ * shape is still TBD, so this is liberal: it accepts `playerId`/`id` as a query
+ * param and `PlayerId`/`playerId`/`Id` from a JSON or form body. Returns null when
+ * no integer id is present.
+ */
+async function targetPlayerId(c: Context<App>): Promise<number | null> {
+	const fromQuery = c.req.query('playerId') ?? c.req.query('id')
+	if (fromQuery !== undefined) {
+		const n = Number.parseInt(fromQuery, 10)
+		if (!Number.isNaN(n)) return n
+	}
+	// Body may be JSON or form-encoded; Hono's parseBody only handles the latter.
+	const contentType = c.req.header('content-type') ?? ''
+	const body = contentType.includes('application/json')
+		? await c.req.json<Record<string, unknown>>().catch(() => ({}) as Record<string, unknown>)
+		: ((await c.req.parseBody().catch(() => ({}))) as Record<string, unknown>)
+	const raw = body.PlayerId ?? body.playerId ?? body.Id
+	if (typeof raw === 'number') return Number.isNaN(raw) ? null : raw
+	if (typeof raw === 'string') {
+		const n = Number.parseInt(raw, 10)
+		if (!Number.isNaN(n)) return n
+	}
+	return null
+}
+
 // ---- Social ----------------------------------------------------------------
 export const socialRoutes = new Hono<App>({ strict: false })
-	.get('/api/relationships/v2/get', (c) => c.json([]))
+	// The authed player's relationships, projected from their point of view — a bare
+	// array of RelationshipResponse. Auth-gated.
+	.get('/api/relationships/v2/get', async (c) => {
+		const id = await authedId(c)
+		if (id === null) return unauthorized(c)
+		return c.json(await getRelationshipsForPlayer(c.env.DB, id))
+	})
+
+	// Send a friend request to another player (the target arrives as `?id=`). The
+	// client calls this as a GET; the mutations accept GET or POST (the Go handlers
+	// matched any method). Auth-gated. Returns the resulting relationship from the
+	// caller's point of view.
+	.on(['GET', 'POST'], '/api/relationships/v2/sendfriendrequest', async (c) => {
+		const id = await authedId(c)
+		if (id === null) return unauthorized(c)
+		const target = await targetPlayerId(c)
+		if (target === null || target === id) return c.json({ error: 'invalid player id' }, 400)
+		return c.json(await sendFriendRequest(c.env.DB, id, target))
+	})
+
+	// Accept a pending friend request from another player (`?id=`). Auth-gated.
+	.on(['GET', 'POST'], '/api/relationships/v2/acceptfriendrequest', async (c) => {
+		const id = await authedId(c)
+		if (id === null) return unauthorized(c)
+		const target = await targetPlayerId(c)
+		if (target === null || target === id) return c.json({ error: 'invalid player id' }, 400)
+		return c.json(await acceptFriendRequest(c.env.DB, id, target))
+	})
+
+	// Remove a friend / cancel a request / decline a request (`?id=`). Auth-gated.
+	.on(['GET', 'POST'], '/api/relationships/v2/removefriend', async (c) => {
+		const id = await authedId(c)
+		if (id === null) return unauthorized(c)
+		const target = await targetPlayerId(c)
+		if (target === null || target === id) return c.json({ error: 'invalid player id' }, 400)
+		await removeFriend(c.env.DB, id, target)
+		return c.json({ success: true })
+	})
+
+	// Directly add another player as a friend, no pending-request step (`?id=`). Auth-gated.
+	.on(['GET', 'POST'], '/api/relationships/v2/addfriend', async (c) => {
+		const id = await authedId(c)
+		if (id === null) return unauthorized(c)
+		const target = await targetPlayerId(c)
+		if (target === null || target === id) return c.json({ error: 'invalid player id' }, 400)
+		return c.json(await addFriend(c.env.DB, id, target))
+	})
+
 	.get('/api/messages/v2/get', (c) => c.json([]))
 	.get('/api/messages/v1/favoriteFriendOnlineStatus', (c) => c.json([]))