initial commit

fluxer_api/src/guild/services/member/GuildMemberValidationService.ts

@@ -0,0 +1,114 @@
+/*
+ * Copyright (C) 2026 Fluxer Contributors
+ *
+ * This file is part of Fluxer.
+ *
+ * Fluxer is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * Fluxer is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with Fluxer. If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import type {GuildID, RoleID, UserID} from '~/BrandedTypes';
+import {guildIdToRoleId} from '~/BrandedTypes';
+import {Permissions} from '~/Constants';
+import {BannedFromGuildError, IpBannedFromGuildError, MissingPermissionsError, UnknownGuildRoleError} from '~/Errors';
+import type {GuildResponse} from '~/guild/GuildModel';
+import type {GuildMember} from '~/Models';
+import type {IUserRepository} from '~/user/IUserRepository';
+import type {IGuildRepository} from '../../IGuildRepository';
+
+export class GuildMemberValidationService {
+	constructor(
+		private readonly guildRepository: IGuildRepository,
+		private readonly userRepository: IUserRepository,
+	) {}
+
+	async validateAndGetRoleIds(params: {
+		userId: UserID;
+		guildId: GuildID;
+		guildData: GuildResponse;
+		targetId: UserID;
+		targetMember: GuildMember;
+		newRoles: Array<RoleID>;
+		hasPermission: (permission: bigint) => Promise<boolean>;
+		canManageRoles: (targetUserId: UserID, targetRoleId: RoleID) => Promise<boolean>;
+	}): Promise<Array<RoleID>> {
+		const {userId, guildId, guildData, targetId, targetMember, newRoles, hasPermission, canManageRoles} = params;
+
+		if (guildData && guildData.owner_id === userId.toString()) {
+			const existingRoles = await this.guildRepository.listRolesByIds(newRoles, guildId);
+			if (existingRoles.length !== newRoles.length) {
+				throw new UnknownGuildRoleError();
+			}
+			return newRoles;
+		}
+
+		if (!(await hasPermission(Permissions.MANAGE_ROLES))) {
+			throw new MissingPermissionsError();
+		}
+
+		const currentRoles = targetMember.roleIds;
+		const rolesToRemove = [...currentRoles].filter((roleId) => !newRoles.includes(roleId));
+		const rolesToAdd = newRoles.filter((roleId) => !currentRoles.has(roleId));
+
+		for (const roleId of [...rolesToAdd, ...rolesToRemove]) {
+			if (roleId === guildIdToRoleId(guildId)) continue;
+			if (!(await canManageRoles(targetId, roleId))) {
+				throw new MissingPermissionsError();
+			}
+		}
+
+		const existingRoles = await this.guildRepository.listRolesByIds(newRoles, guildId);
+		if (existingRoles.length !== newRoles.length) {
+			throw new UnknownGuildRoleError();
+		}
+
+		return newRoles;
+	}
+
+	async validateRoleAssignment(params: {
+		guildData: GuildResponse;
+		guildId: GuildID;
+		userId: UserID;
+		targetId: UserID;
+		roleId: RoleID;
+		canManageRoles: (targetUserId: UserID, targetRoleId: RoleID) => Promise<boolean>;
+	}): Promise<void> {
+		const {guildData, guildId, userId, targetId, roleId, canManageRoles} = params;
+
+		if (guildData && guildData.owner_id === userId.toString()) {
+			const role = await this.guildRepository.getRole(roleId, guildId);
+			if (!role || role.id === guildIdToRoleId(guildId)) {
+				throw new UnknownGuildRoleError();
+			}
+		} else {
+			if (!(await canManageRoles(targetId, roleId))) {
+				throw new MissingPermissionsError();
+			}
+		}
+	}
+
+	async checkUserBanStatus({userId, guildId}: {userId: UserID; guildId: GuildID}): Promise<void> {
+		const bans = await this.guildRepository.listBans(guildId);
+		const user = await this.userRepository.findUnique(userId);
+		const userIp = user?.lastActiveIp;
+
+		for (const ban of bans) {
+			if (ban.userId === userId) {
+				throw new BannedFromGuildError();
+			}
+			if (userIp && ban.ipAddress && ban.ipAddress === userIp) {
+				throw new IpBannedFromGuildError();
+			}
+		}
+	}
+}