/** * @copyright 2026 NHCarrigan * @license Naomi's Public License * @author Naomi Carrigan */ import { Show, ShowStatus, ShowType, CreateShowDto, UpdateShowDto } from "@library/shared-types"; import { prisma } from "../lib/prisma"; import { validateUrl, validateRating, validateStringLength, validateDataUrl, MAX_LENGTHS, } from "../utils/validation"; export class ShowService { private prisma = prisma; constructor() {} /** * Validate show data for security. */ private validateShowData(data: CreateShowDto | UpdateShowDto): void { // Validate string lengths if (!validateStringLength(data.title, MAX_LENGTHS.TITLE)) { throw new Error(`Title must be ${MAX_LENGTHS.TITLE} characters or less.`); } if (!validateStringLength(data.notes, MAX_LENGTHS.NOTES)) { throw new Error(`Notes must be ${MAX_LENGTHS.NOTES} characters or less.`); } // Validate rating if (!validateRating(data.rating)) { throw new Error("Rating must be an integer between 0 and 10."); } // Validate cover image URL if (data.coverImage) { if (data.coverImage.startsWith("data:")) { const base64Data = data.coverImage.split(",")[1]; if (!base64Data) { throw new Error("Invalid image data URL format."); } const sizeInBytes = base64Data.length * 0.75; if (sizeInBytes > MAX_LENGTHS.DATA_URL) { throw new Error("Cover image must be under 5MB."); } if (!validateDataUrl(data.coverImage)) { throw new Error("Invalid image data URL."); } } else { if (!validateStringLength(data.coverImage, MAX_LENGTHS.URL)) { throw new Error(`Cover image URL must be ${MAX_LENGTHS.URL} characters or less.`); } if (!validateUrl(data.coverImage)) { throw new Error("Invalid cover image URL. Only http and https URLs are allowed."); } } } // Validate tags if (data.tags) { for (const tag of data.tags) { if (!validateStringLength(tag, MAX_LENGTHS.TAGS)) { throw new Error(`Each tag must be ${MAX_LENGTHS.TAGS} characters or less.`); } } } // Validate link URLs if (data.links) { for (const link of data.links) { if (!validateUrl(link.url)) { throw new Error(`Invalid link URL: ${link.title}. Only http and https URLs are allowed.`); } if (!validateStringLength(link.title, MAX_LENGTHS.TITLE)) { throw new Error(`Link title must be ${MAX_LENGTHS.TITLE} characters or less.`); } if (!validateStringLength(link.url, MAX_LENGTHS.URL)) { throw new Error(`Link URL must be ${MAX_LENGTHS.URL} characters or less.`); } } } } async getAllShows(): Promise { const shows = await this.prisma.show.findMany({ orderBy: { updatedAt: "desc" }, }); return shows.map((show) => ({ ...show, type: show.type as unknown as ShowType, status: show.status as unknown as ShowStatus, dateAdded: show.dateAdded, dateStarted: show.dateStarted || undefined, dateCompleted: show.dateCompleted || undefined, dateFinished: show.dateFinished || undefined, tags: show.tags ?? [], links: show.links ?? [], createdAt: show.createdAt, updatedAt: show.updatedAt, })); } async getShowById(id: string): Promise { const show = await this.prisma.show.findUnique({ where: { id }, }); if (!show) return null; return { ...show, type: show.type as unknown as ShowType, status: show.status as unknown as ShowStatus, dateAdded: show.dateAdded, dateStarted: show.dateStarted || undefined, dateCompleted: show.dateCompleted || undefined, dateFinished: show.dateFinished || undefined, tags: show.tags ?? [], links: show.links ?? [], createdAt: show.createdAt, updatedAt: show.updatedAt, }; } async createShow(data: CreateShowDto): Promise { // Validate input this.validateShowData(data); const show = await this.prisma.show.create({ data: { ...data, type: data.type.toUpperCase() as any, status: data.status.toUpperCase() as any, }, }); return { ...show, type: show.type as unknown as ShowType, status: show.status as unknown as ShowStatus, dateAdded: show.dateAdded, dateStarted: show.dateStarted || undefined, dateCompleted: show.dateCompleted || undefined, dateFinished: show.dateFinished || undefined, tags: show.tags ?? [], links: show.links ?? [], createdAt: show.createdAt, updatedAt: show.updatedAt, }; } async updateShow(id: string, data: UpdateShowDto): Promise { // Validate input this.validateShowData(data); const updateData = { ...data }; if (updateData.type) { updateData.type = updateData.type.toUpperCase() as any; } if (updateData.status) { updateData.status = updateData.status.toUpperCase() as any; } const show = await this.prisma.show.update({ where: { id }, data: updateData, }); return { ...show, type: show.type as unknown as ShowType, status: show.status as unknown as ShowStatus, dateAdded: show.dateAdded, dateStarted: show.dateStarted || undefined, dateCompleted: show.dateCompleted || undefined, dateFinished: show.dateFinished || undefined, tags: show.tags ?? [], links: show.links ?? [], createdAt: show.createdAt, updatedAt: show.updatedAt, }; } async deleteShow(id: string): Promise { await this.prisma.show.delete({ where: { id }, }); } }