GMW/services/discord-gateway/src/modules/ai-moderation/autoDeleteManager.ts

import type { Client, PermissionString } from "discord.js-selfbot-v13";
import { LRUCache } from "lru-cache";
import { createChildLogger } from "@/shared/logger/index";
import { config } from "../../shared/config/config.js";
import { messageStore } from "../message-capture/messageStore.js";
import type { MessageRecord } from "../message-capture/types.js";
import {
  isEligibleForAutoDelete,
  isNicknameOnlyViolation,
} from "./autoDeleteEligibility.js";
import { logDeletionToChannel } from "./autoDeleteLogger.js";
import { sendDeletionNotification } from "./autoDeleteNotify.js";

const logger = createChildLogger("auto-delete-manager");

export interface AutoDeleteResult {
  deleted: boolean;
  skipped: boolean;
  reason: string;
}

// Cooldown per guild:user — a nick violation fires per message, but the
// Discord PATCH is idempotent; hammering it on every message by the same
// member is wasteful and risks rate limits.
const recentNicknameResets = new LRUCache<string, number>({
  max: 200,
  ttl: config.AUTO_NICKNAME_RESET_COOLDOWN_MS ?? 10 * 60 * 1000,
});

export function isNicknameResetInCooldown(
  guildId: string,
  userId: string,
): boolean {
  return recentNicknameResets.has(`${guildId}:${userId}`);
}

/**
 * Resets a member's server nickname to the default (global username) —
 * Discord's `setNickname(null)` removes the custom nick so the member is
 * shown under their default username. Non-blocking; failures are logged
 * but never throw into the moderation pipeline.
 */
export async function resetOffensiveNickname(
  client: Client | undefined,
  guildId: string,
  userId: string,
  messageId: string,
): Promise<boolean> {
  const cooldownKey = `${guildId}:${userId}`;
  try {
    if (!client?.user?.id) {
      logger.warn(
        { messageId, guildId, userId },
        "Nick reset skipped: client missing",
      );
      return false;
    }
    if (userId === client.user.id) {
      logger.debug({ userId }, "Nick reset skipped: operator's own account");
      return false;
    }
    if (recentNicknameResets.has(cooldownKey)) {
      logger.debug({ guildId, userId }, "Nick reset skipped: cooldown active");
      return false;
    }
    if (config.AUTO_NICKNAME_RESET_ENABLED === false) return false;

    const guild = client.guilds.cache.get(guildId);
    if (!guild) {
      logger.warn(
        { messageId, guildId },
        "Nick reset skipped: guild not found",
      );
      return false;
    }
    const member = await guild.members.fetch(userId);
    // setNickname(null) = remove nickname → Discord shows global username
    await member.setNickname(null, "[auto] nickname melanggar aturan server");
    recentNicknameResets.set(cooldownKey, Date.now());
    logger.info(
      { messageId, guildId, userId },
      "Offensive nickname reset to default username",
    );
    return true;
  } catch (error) {
    logger.warn(
      {
        messageId,
        guildId,
        userId,
        error: error instanceof Error ? error.message : String(error),
      },
      "Nick reset failed",
    );
    return false;
  }
}

// ─── Error Handling Utilities ────────────────────────────────────────

function getErrorCode(error: unknown): number | string | undefined {
  if (!error || typeof error !== "object") return undefined;
  const maybeCode = (error as { code?: number | string }).code;
  const maybeStatus = (error as { status?: number | string }).status;
  return maybeCode ?? maybeStatus;
}

function isAlreadyDeletedError(error: unknown): boolean {
  const code = getErrorCode(error);
  return code === 10008 || code === 404 || code === "10008" || code === "404";
}

function hasChannelMessagesApi(channel: unknown): channel is {
  messages: {
    fetch: (id: string) => Promise<{ delete: () => Promise<unknown> }>;
  };
} {
  return Boolean(
    channel &&
      typeof channel === "object" &&
      "messages" in channel &&
      (channel as { messages?: unknown }).messages &&
      typeof (channel as { messages: { fetch?: unknown } }).messages.fetch ===
        "function",
  );
}

function hasPermissionApi(channel: unknown): channel is {
  permissionsFor: (
    member: unknown,
  ) => { has: (permission: string) => boolean } | null;
} {
  return Boolean(
    channel &&
      typeof channel === "object" &&
      "permissionsFor" in channel &&
      typeof (channel as { permissionsFor?: unknown }).permissionsFor ===
        "function",
  );
}

// ─── Database Action Log ─────────────────────────────────────────────

async function logAutoDeleteAttempt(
  message: MessageRecord,
  result: AutoDeleteResult,
): Promise<void> {
  try {
    await messageStore.createModerationAction({
      message_id: message.id,
      user_id: message.user_id,
      guild_id: message.guild_id,
      action_type: "delete_message",
      reason: result.reason,
      executed_by: "auto-delete-manager",
      status: result.deleted
        ? "executed"
        : result.reason === "dry_run"
          ? "executed"
          : "failed",
      error: result.reason === "error" ? result.reason : null,
      executed_at:
        result.deleted || result.reason === "dry_run" ? Date.now() : null,
    });
  } catch (error) {
    logger.warn(
      {
        messageId: message.id,
        error: error instanceof Error ? error.message : String(error),
      },
      "Failed to persist auto-delete action log",
    );
  }
}

// ─── Main Orchestrator ───────────────────────────────────────────────

export async function attemptAutoDeleteFlaggedMessage(
  client: Client | undefined,
  message: MessageRecord,
): Promise<AutoDeleteResult> {
  logger.debug({ messageId: message.id }, "Processing message for auto-delete");

  // ── Config gate ──────────────────────────────────────────────────

  if (!config.AUTO_DELETE_FLAGGED_ENABLED) {
    logger.debug({ messageId: message.id }, "Auto-delete disabled by config");
    return { deleted: false, skipped: true, reason: "disabled" };
  }

  // ── Nickname-only violation: reset nick, DO NOT delete ─────────────
  // When the only flag is offensive_username (message content is clean),
  // the problem is the server nickname, not the message. Enforcement is
  // removing the nickname back to the default username — the message stays.
  if (isNicknameOnlyViolation(message)) {
    if (
      !config.AUTO_DELETE_FLAGGED_DRY_RUN &&
      config.AUTO_NICKNAME_RESET_ENABLED !== false
    ) {
      const inCooldown = isNicknameResetInCooldown(
        message.guild_id,
        message.user_id,
      );
      if (!inCooldown) {
        const resetOk = await resetOffensiveNickname(
          client,
          message.guild_id,
          message.user_id,
          message.id,
        );
        try {
          await messageStore.createModerationAction({
            message_id: message.id,
            user_id: message.user_id,
            guild_id: message.guild_id,
            action_type: "reset_nickname",
            reason:
              "nickname melanggar aturan server (offensive_username); pesan dibiarkan",
            executed_by: "auto-delete-manager",
            status: resetOk ? "executed" : "failed",
            error: resetOk ? null : "nickname_reset_failed",
            executed_at: resetOk ? Date.now() : null,
          });
        } catch (error) {
          logger.warn(
            {
              messageId: message.id,
              error: error instanceof Error ? error.message : String(error),
            },
            "Failed to persist nickname reset action log",
          );
        }
      }
    }
    logger.info(
      { messageId: message.id, userId: message.user_id },
      "Nickname-only violation: message kept, nickname reset attempted",
    );
    return { deleted: false, skipped: true, reason: "nickname_only_violation" };
  }

  // ── Status gate ──────────────────────────────────────────────────

  if (message.ai_status !== "flagged" && message.ai_status !== "warn") {
    logger.debug(
      { messageId: message.id, status: message.ai_status },
      "Auto-delete skipped: message not flagged or warned",
    );
    const result: AutoDeleteResult = {
      deleted: false,
      skipped: true,
      reason: "not_flagged_or_warn",
    };
    await logAutoDeleteAttempt(message, result);
    return result;
  }

  // ── Eligibility gate ─────────────────────────────────────────────

  if (!isEligibleForAutoDelete(message)) {
    logger.debug(
      { messageId: message.id },
      "Auto-delete skipped: not eligible (confidence/severity/action/category filter)",
    );
    const result: AutoDeleteResult = {
      deleted: false,
      skipped: true,
      reason: "not_eligible",
    };
    await logAutoDeleteAttempt(message, result);
    return result;
  }

  // ── Client check ─────────────────────────────────────────────────

  if (!client?.user?.id) {
    logger.warn(
      { messageId: message.id },
      "Auto-delete skipped: client user missing",
    );
    return { deleted: false, skipped: true, reason: "client_user_missing" };
  }

  // ── Deletion flow ────────────────────────────────────────────────

  try {
    const guild = client.guilds.cache.get(message.guild_id);
    if (!guild) {
      logger.warn(
        { messageId: message.id, guildId: message.guild_id },
        "Auto-delete skipped: guild not found",
      );
      return { deleted: false, skipped: true, reason: "guild_not_found" };
    }

    const channelId = message.thread_id ?? message.channel_id;
    const channel = guild.channels.cache.get(channelId);
    if (!channel) {
      logger.warn(
        { messageId: message.id, channelId },
        "Auto-delete skipped: channel not found",
      );
      return { deleted: false, skipped: true, reason: "channel_not_found" };
    }

    if (!hasPermissionApi(channel) || !hasChannelMessagesApi(channel)) {
      logger.warn(
        { messageId: message.id, channelId },
        "Auto-delete skipped: channel cannot delete messages",
      );
      return { deleted: false, skipped: true, reason: "unsupported_channel" };
    }

    const selfMember = await guild.members.fetch(client.user.id);
    const permissions = channel.permissionsFor(selfMember);
    const canManageMessages =
      permissions?.has("MANAGE_MESSAGES" as PermissionString) ?? false;

    if (!canManageMessages) {
      logger.warn(
        { messageId: message.id, channelId, userId: client.user.id },
        "Auto-delete skipped: current user lacks Manage Messages",
      );
      return {
        deleted: false,
        skipped: true,
        reason: "missing_manage_messages",
      };
    }

    // ── Dry run mode ───────────────────────────────────────────────

    if (config.AUTO_DELETE_FLAGGED_DRY_RUN) {
      const result: AutoDeleteResult = {
        deleted: false,
        skipped: true,
        reason: "dry_run",
      };
      await logAutoDeleteAttempt(message, result);
      logger.info(
        { messageId: message.id, channelId },
        "Auto-delete dry-run: would delete flagged message",
      );
      return result;
    }

    // ── Perform API deletion ───────────────────────────────────────

    const discordMessage = await channel.messages.fetch(message.id);
    await discordMessage.delete();
    logger.info(
      { messageId: message.id, channelId },
      "Message deleted from Discord",
    );

    // ── Notify user via DM ─────────────────────────────────────────

    await sendDeletionNotification(client, message, guild.name);

    // ── Log to moderation channel ──────────────────────────────────

    await logDeletionToChannel(guild, message, channelId);

    // ── Success ────────────────────────────────────────────────────

    const result: AutoDeleteResult = {
      deleted: true,
      skipped: false,
      reason: "deleted",
    };
    await logAutoDeleteAttempt(message, result);
    logger.info(
      { messageId: message.id, channelId },
      "Auto-deleted AI-flagged message",
    );
    return result;
  } catch (error) {
    // ── Already deleted ──────────────────────────────────────────────

    if (isAlreadyDeletedError(error)) {
      const result: AutoDeleteResult = {
        deleted: true,
        skipped: false,
        reason: "already_deleted",
      };
      await logAutoDeleteAttempt(message, result);
      logger.info(
        { messageId: message.id, code: getErrorCode(error) },
        "Auto-delete skipped: message already deleted",
      );
      return result;
    }

    // ── Unexpected error ─────────────────────────────────────────────

    const result: AutoDeleteResult = {
      deleted: false,
      skipped: true,
      reason: "error",
    };
    await logAutoDeleteAttempt(message, result);
    logger.error(
      {
        messageId: message.id,
        error: error instanceof Error ? error.message : String(error),
        code: getErrorCode(error),
      },
      "Auto-delete failed",
    );
    return result;
  }
}