import { dK as defineContentEventHandler, c as createError, dL as optionalAuth, bT as requirePermission, aG as requireFeature, q as readBody, d$ as getCommentByIdForEntry, e7 as createComment, ad as logAuditEventAsync, e1 as broadcastCommentEvent } from '../../../../../nitro/nitro.mjs';
import { m as mapContentApiError } from '../../../../../_/api-helpers.mjs';
import { g as getAuditActorFromEvent } from '../../../../../_/audit-log-actor.mjs';
import 'node:crypto';
import 'jsonwebtoken';
import 'node:fs';
import 'node:module';
import 'node:path';
import 'node:url';
import 'node:http';
import 'node:https';
import 'node:events';
import 'node:buffer';
import 'pino';
import 'drizzle-orm/better-sqlite3';
import 'drizzle-orm/node-postgres';
import 'drizzle-orm/mysql2';
import 'better-sqlite3';
import 'pg';
import 'mysql2/promise';
import 'drizzle-orm';
import 'fs';
import 'path';
import 'prom-client';
import 'bcryptjs';
import '@node-rs/argon2';
import 'node:async_hooks';
import 'crypto';
import 'node:dns';
import 'node:util';
import 'node:net';
import 'fs/promises';
import 'url';
import 'semver';
import '../../../../../_/delivery-metrics.mjs';

const index_post = defineContentEventHandler("read", async (event) => {
  var _a, _b, _c, _d;
  try {
    const contentType = (_a = event.context.params) == null ? void 0 : _a.contentType;
    const id = (_b = event.context.params) == null ? void 0 : _b.id;
    if (!contentType || !id) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "Content type and ID are required"
      });
    }
    const numericId = parseInt(id);
    if (isNaN(numericId)) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "ID must be a valid number"
      });
    }
    await optionalAuth(event);
    await requirePermission(
      event.context.user,
      contentType,
      "read",
      event.context.adminUser,
      event.context.apiToken
    );
    await requireFeature("collaboration.comments", event);
    const actor = getAuditActorFromEvent(event);
    if (!actor.id) {
      throw createError({
        statusCode: 401,
        statusMessage: "Unauthorized",
        message: "Authentication required to create comments"
      });
    }
    const body = await readBody(event);
    if (!body.body || typeof body.body !== "string" || body.body.trim().length === 0) {
      throw createError({
        statusCode: 400,
        statusMessage: "Bad Request",
        message: "Comment body is required"
      });
    }
    if (body.parentId !== void 0 && body.parentId !== null) {
      const parent = await getCommentByIdForEntry(body.parentId, contentType, numericId);
      if (!parent) {
        throw createError({
          statusCode: 400,
          statusMessage: "Bad Request",
          message: "Parent comment not found"
        });
      }
    }
    const comment = await createComment(contentType, numericId, actor, {
      body: body.body.trim(),
      parentId: body.parentId,
      mentions: body.mentions
    });
    logAuditEventAsync({
      action: "comment.create",
      actor,
      target: {
        entityType: contentType,
        entityId: numericId,
        displayName: `comment #${comment.id}`
      }
    });
    broadcastCommentEvent(contentType, numericId, "comment.created", comment, {
      type: actor.type,
      id: actor.id,
      displayName: actor.displayName || actor.email || `${actor.type}:${actor.id}`
    });
    return {
      success: true,
      data: comment
    };
  } catch (error) {
    mapContentApiError(error, {
      routeLabel: `POST /api/content/${(_c = event.context.params) == null ? void 0 : _c.contentType}/${(_d = event.context.params) == null ? void 0 : _d.id}/comments`
    });
  }
});

export { index_post as default };
//# sourceMappingURL=index.post2.mjs.map
