Mentions in post comments
- @mention autocomplete (workspace members, current user excluded) with
marker syntax @[uuid] persisted, display names rendered via CommentBody
chips; live edit replaces markers with names and converts back on save.
- NotifyMentions action with workspace-scoped membership check, dedupes
same user, only newly-added mentions on update.
- Email + in-app via SendNotification job, respecting per-user
notification_preferences.mentioned_in_comment.
- Heartbeat-based presence (Cache, 60s TTL, 30s ping) so online recipients
get only the in-app notification — no email noise.
- Real-time bell on workspace.{id}.user.{id} private channel
(NotificationCreated event), scoped channel name avoids client-side
filtering and lays out a convention for future workspace channels.
- Mailable localized via lang/{en,es,pt-BR}/mail.php; Maizzle source
template for the email is committed and built into resources/views/mail.
AI generation refactor (Action layer + MCP)
- Extracted Actions/Ai/Generate{Image,Video} with QuotaExhaustedException
so agent tools and MCP tools share a single domain entry point.
- Mcp/Tools/Ai/Generate{Image,Video}Tool registered in TryPostServer; both
return MediaResource payloads.
- Orientation::imageApiSize maps non-OpenAI ratios to 1:1/2:3/3:2.
- config/ai.php is now the single source of truth driven by env, removing
the trypost.ai shim. Default text/image providers flipped to OpenAI.
Settings/UX
- /settings/workspace split into shadcn Tabs (Workspace / Brand / Users)
with three components.
- /assets and the in-editor MediaPicker open the ImagePreviewDialog
lightbox on image click while preserving action button behaviour.
- Comments tab landed via ?tab=comments&comment=<id> from notification
click (scroll-to + temporary highlight).
- Mention autocomplete popover flips above when near the viewport bottom.
- Real social platform PNGs replace Tabler brand glyphs in schedule
pills and post list, with hover tooltip carrying display_name + handle.
Bug fixes
- AcceptInvite: controller now passes workspace + role payload that the
Vue page expects; login/register CTAs preselect the invite email.
- WorkspaceInvite mailable: stopped referencing nonexistent
$invite->workspace and $invite->role; column added to the migration,
Invite model casts role to WorkspaceRole, CreateInvite persists it.
- PostCommentCreated: added broadcastAs so .PostCommentCreated actually
matches the Echo listener; payload now includes mentioned_users so
receivers render the chip correctly without a refetch.
- Preview components for X/Pinterest/Threads/Bluesky/LinkedIn/Mastodon/
TikTok/YouTube switched from item.type === 'image' to
!isVideoMedia(item) so media without a persisted type still renders.
- UpdatePostRequest now accepts media.*.{type,mime_type,size,...} so the
posts.media JSON keeps the metadata that the previews need.
- Removed throttle:6,1 from social connect routes (was 429ing legitimate
OAuth retries).
- Used MediaType enum cases instead of literal 'image'/'video' strings
when creating media rows.
Tests
- MentionParser unit tests, NotifyMentions feature tests including
online/offline channel selection and preference gating, MCP AI tool
happy paths, MentionedInComment mailable rendering, AcceptInvite +
search-members + index mentioned_users path. 1229 passing.
164 lines
4.9 KiB
PHP
164 lines
4.9 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\App;
|
|
|
|
use App\Actions\PostComment\NotifyMentions;
|
|
use App\Events\PostCommentCreated;
|
|
use App\Http\Requests\App\PostComment\ReactPostCommentRequest;
|
|
use App\Http\Requests\App\PostComment\StorePostCommentRequest;
|
|
use App\Http\Requests\App\PostComment\UpdatePostCommentRequest;
|
|
use App\Models\Post;
|
|
use App\Models\PostComment;
|
|
use App\Models\User;
|
|
use App\Support\MentionParser;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class PostCommentController extends Controller
|
|
{
|
|
public function index(Request $request, Post $post): JsonResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if ($post->workspace_id !== $workspace->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$comments = $post->comments()
|
|
->whereNull('parent_id')
|
|
->with(['user', 'replies.user'])
|
|
->latest()
|
|
->paginate(config('app.pagination.default'));
|
|
|
|
$mentionedIds = $comments->getCollection()
|
|
->flatMap(function ($comment) {
|
|
$ids = MentionParser::extractUserIds($comment->body ?? '');
|
|
foreach ($comment->replies as $reply) {
|
|
$ids = array_merge($ids, MentionParser::extractUserIds($reply->body ?? ''));
|
|
}
|
|
|
|
return $ids;
|
|
})
|
|
->unique()
|
|
->values()
|
|
->all();
|
|
|
|
$mentionedUsers = empty($mentionedIds)
|
|
? []
|
|
: User::query()
|
|
->whereIn('id', $mentionedIds)
|
|
->get(['id', 'name'])
|
|
->mapWithKeys(fn ($u) => [$u->id => $u->name])
|
|
->all();
|
|
|
|
return response()->json([
|
|
...$comments->toArray(),
|
|
'mentioned_users' => $mentionedUsers,
|
|
]);
|
|
}
|
|
|
|
public function store(StorePostCommentRequest $request, Post $post): JsonResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if ($post->workspace_id !== $workspace->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$validated = $request->validated();
|
|
|
|
if (data_get($validated, 'parent_id')) {
|
|
$parent = PostComment::where('id', data_get($validated, 'parent_id'))
|
|
->where('post_id', $post->id)
|
|
->first();
|
|
|
|
if (! $parent) {
|
|
abort(Response::HTTP_NOT_FOUND);
|
|
}
|
|
|
|
if ($parent->parent_id !== null) {
|
|
abort(Response::HTTP_UNPROCESSABLE_ENTITY, 'Cannot reply to a reply.');
|
|
}
|
|
}
|
|
|
|
$comment = $post->comments()->create([
|
|
'user_id' => $request->user()->id,
|
|
'parent_id' => data_get($validated, 'parent_id'),
|
|
'body' => data_get($validated, 'body'),
|
|
]);
|
|
|
|
$comment->load('user');
|
|
|
|
NotifyMentions::execute($comment);
|
|
PostCommentCreated::dispatch($comment);
|
|
|
|
return response()->json($comment, Response::HTTP_CREATED);
|
|
}
|
|
|
|
public function update(UpdatePostCommentRequest $request, Post $post, PostComment $comment): JsonResponse
|
|
{
|
|
if ($comment->post_id !== $post->id) {
|
|
abort(Response::HTTP_NOT_FOUND);
|
|
}
|
|
|
|
if ($comment->user_id !== $request->user()->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
if ($comment->post->workspace_id !== $workspace->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$validated = $request->validated();
|
|
|
|
$previousBody = $comment->body;
|
|
$comment->update(['body' => data_get($validated, 'body')]);
|
|
|
|
NotifyMentions::execute($comment, $previousBody);
|
|
|
|
return response()->json($comment);
|
|
}
|
|
|
|
public function destroy(Request $request, Post $post, PostComment $comment): JsonResponse
|
|
{
|
|
if ($comment->post_id !== $post->id) {
|
|
abort(Response::HTTP_NOT_FOUND);
|
|
}
|
|
|
|
if ($comment->user_id !== $request->user()->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
if ($comment->post->workspace_id !== $workspace->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$comment->delete();
|
|
|
|
return response()->json(null, Response::HTTP_NO_CONTENT);
|
|
}
|
|
|
|
public function react(ReactPostCommentRequest $request, Post $post, PostComment $comment): JsonResponse
|
|
{
|
|
if ($comment->post_id !== $post->id) {
|
|
abort(Response::HTTP_NOT_FOUND);
|
|
}
|
|
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if ($post->workspace_id !== $workspace->id) {
|
|
abort(Response::HTTP_FORBIDDEN);
|
|
}
|
|
|
|
$validated = $request->validated();
|
|
|
|
$comment->addReaction($request->user()->id, data_get($validated, 'emoji'));
|
|
|
|
return response()->json($comment->fresh());
|
|
}
|
|
}
|