// Represents: GET /messages/ · MessagesController — see docs/ISYSTEM_REFERENCE.md §Batch 1 "Messages"
/*
Messages (Messaggi) — operator→player/user messaging.
Replaces the HostMessages component bundled in HostFinanceMsg.jsx (this file
loads after it, so this definition wins; HostFinanceMsg.jsx retires when its
last screen is split out).
Real surface implemented here:
- Tab "Messages received" (default, GET /messages/ → getMessages JSON)
- Tab "Messages sent" (GET /messages/?tab=sent → getSent JSON)
- View modal (GET /messages/view/?id=… → forms/viewMessage.blade.php)
- Sent modal (GET /messages/viewsent/?id=… → forms/sentMessage.blade.php)
- Compose modal (GET /messages/newMessage/ → POST /messages/sendNewMessage/)
Label policy: nearly every label on the real screen renders as a raw
backend.* key (only backend.status and backend.operation_ok exist in the
sole lang file, resources/lang/it/backend.php). Every label below is an
operator-facing English rendering of its backend.* key — label inferred
throughout unless noted otherwise.
Known real-platform behaviors intentionally NOT reproduced:
- "Send to all" legacy path: if the first selected recipient id == 1,
sendNewMessage calls objectToArray($allMix) with $allMix UNDEFINED →
recipients end up empty → ajaxError("Errore sconosciuto"). Broken dead
path; the mock directory has no root user so it cannot be reached.
- newMessageForm's edit branch queries Message::where("id", " = ", $id) —
the invalid " = " operator becomes the VALUE, so the query never matches
and the modal always opens as act=new. There is no edit; none is built.
- Export: DataTables buttons/pdfmake/print scripts are loaded in the real
footer_scripts but no `buttons` config exists, so nothing renders. No
export is built here either (no invented actions).
*/
/* deterministic PRNG so lists render identically each load */
const hmgRand = (seed) => { let s = seed >>> 0; return () => { s = (s * 1664525 + 1013904223) >>> 0; return s / 4294967296; }; };
const hmgToast = (m) => window.PAYBO?.emitToast && window.PAYBO.emitToast({ id: `hmg-${Date.now()}`, tx_id: m, amount: 0, currency: "HOST", player: "Messages", reason: "Prototype state only \u2014 not persisted." });
/* local wall-clock timestamp builder + the real screen's date format
date("d/m/Y G:i", addedTime) — day/month zero-padded, hour NOT padded */
const hmgTs = (d, m, y, h, mi) => Math.floor(new Date(y, m - 1, d, h, mi).getTime() / 1000);
const hmgFmtDT = (ts) => {
if (!ts) return "--------"; // sentMessage.blade renders dashes for a null visualizationTime
const dt = new Date(ts * 1000); const p = (n) => String(n).padStart(2, "0");
return `${p(dt.getDate())}/${p(dt.getMonth() + 1)}/${dt.getFullYear()} ${dt.getHours()}:${p(dt.getMinutes())}`;
};
/* Wall-clock stamp for the Update links. It reports when the list was last re-read — a fact
about something that really happened, so it can be shown without lying. */
const hmgClock = (ms) => { const d = new Date(ms), p = (n) => String(n).padStart(2, "0"); return `${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`; };
const hmgSyncStamp = (ms) => (ms ? Updated {hmgClock(ms)} : null);
const HMG_PAGE_SIZES = [5, 10, 25, 50, 100]; // DataTables lengthMenu; pageLength default 100 (messages.js/sent.js)
/* WHAT WAS HERE, AND WHY NONE OF IT SURVIVED
HMG_ME the signed-in operator, as the string "sinoplata". Rendered on
every sent message as "Message sent to". The operator now comes
from current_app_user().
HMG_DIR 15 user records with ids, levels and ltree paths. It was the
entire recipient directory AND the network-expansion tree, so
every recipient anyone could pick was invented, and the subtree
arithmetic ran over an invented hierarchy.
HMG_INBOX 11 messages with subjects, Spanish bodies and read timestamps.
HMG_SENT 5 sends, each carrying a nested array of per-recipient read
receipts generated by hmgGenReadStates().
HMG_PLAYERS_POOL 24 player usernames those receipts were attributed to.
A read receipt is a claim about what a specific person did. Twenty-four
invented players with invented read times is a compliance record of an event
that did not happen, and there is nothing on the screen that says so. */
const hmgInboxFromDb = (r) => {
const b = r.body || {};
const sec = (t) => (t ? Math.floor(Date.parse(t) / 1000) : null);
return {
id: r.id,
object: b.subject || "",
/* body_html, rendered as text by this screen exactly as it always did —
the column is html and the screen has never trusted it as markup. */
text: b.body_html || "",
pop_up: b.popup ? 1 : 0,
/* message_statuses: the screen's `stato` is 0 unread / 1 read. */
stato: Number(r.status_id) === 1 ? 1 : 0,
addedTime: sec(b.created_at || r.created_at),
visualizationTime: sec(r.read_at),
from: (b.sender && b.sender.username) || "",
};
};
const hmgSentFromDb = (r) => ({
message_id: r.id,
object: r.subject || "",
text: r.body_html || "",
pop_up: r.popup ? 1 : 0,
addedTime: r.created_at ? Math.floor(Date.parse(r.created_at) / 1000) : null,
/* Recipients are fetched separately and joined in by body id. The count embed
on this resource is the fast path for the list column; the per-recipient
read receipts only matter when the modal opens. */
recipientCount: Array.isArray(r.recipients) && r.recipients[0] ? Number(r.recipients[0].count) : 0,
recipients: [],
});
const hmgFilterRows = (rows, f, isSent) => rows.filter((r) => {
if (f.object && !r.object.toLowerCase().includes(f.object.toLowerCase())) return false; // server: messages.object LIKE %v%
if (f.from) { const t = Math.floor(new Date(f.from + "T00:00:00").getTime() / 1000); if (r.addedTime < t) return false; }
if (f.to) { const t = Math.floor(new Date(f.to + "T23:59:59").getTime() / 1000); if (r.addedTime > t) return false; }
if (!isSent && f.status === "1" && r.stato !== 1) return false; // UI code 1 = readed
if (!isSent && f.status === "3" && r.stato !== 0) return false; // UI code 3 → server maps to stato = 0 (to read)
return true;
});
/* sortable per reference — received: id, addedTime, stato, message, pop_up
(object NOT sortable); sent: id (message_id), message, pop_up, addedTime.
Default id DESC: both real JS files hardcode order [[0,"desc"]], overriding
the controller's messages.id ASC default. */
const hmgSortRows = (rows, s, isSent) => {
const dir = s.dir === "asc" ? 1 : -1;
return [...rows].sort((a, b) => {
if (s.key === "message") { const va = a.text.toLowerCase(), vb = b.text.toLowerCase(); return va < vb ? -dir : va > vb ? dir : 0; }
const va = s.key === "id" ? (isSent ? a.message_id : a.id) : a[s.key];
const vb = s.key === "id" ? (isSent ? b.message_id : b.id) : b[s.key];
return (va - vb) * dir;
});
};
const HmgSortTh = ({ label, k, sort, setSort, sortable = true, tip, style }) => (
);
/* DataTables-style length menu + pager (server-side pagination on the real screen) */
const HmgPager = ({ total, page, setPage, size, setSize }) => {
const pages = Math.max(1, Math.ceil(total / size));
const from = total === 0 ? 0 : page * size + 1;
const to = Math.min(total, (page + 1) * size);
return (
Show
entries
Showing {from} to {to} of {total} entries
{pages > 1 && (
{Array.from({ length: pages }, (_, i) => (
))}
)}
);
};
/* status chip: messages.stato 0 → backend.to_read / 1 → backend.readed (labels inferred) */
const HmgStatusChip = ({ stato }) => stato === 1
? Read
: To read;
/* ---- Filter fields (shared between the desktop gray-inset bar and the
mobile bottom sheet). Received: object / date range / read status; sent has
NO status filter. Dates: the real datepickers are text inputs hardcoded to
Italian locale dd/mm/yyyy (messages.js) — native date inputs are the
elevated equivalent. */
const HmgFilterFields = ({ isSent, draft, setDraft }) => (
<>
)}
);
/* mobile full-height filter sheet (brief §11: filter bars collapse to a
Filters button + sheet on narrow viewports) */
const HmgSheet = ({ isSent, draft, setDraft, onSearch, onClose }) => (
<>
Filters
);
/* ---- View modal (received) — GET /messages/view/?id=.
Renders forms/viewMessage.blade.php: image with download link when
messages_root.image is set (legacy data — the compose form never sets it),
object, message, pop_up yes/no, and backend.message_sent_to = the recipient
username (the viewing operator). Close-only (onlyclose=1). Opening marks
the message read server-side (stato=1 + visualizationTime=time()). */
const HmgViewModal = ({ row, onClose }) => (
e.stopPropagation()}>
View message{/* label inferred: modal title */}
{row.image && (
{/* real path: Storage img/messages/ + MEDIA_DOMAIN /messages_images/ */}
{row.image}
{/* The attachment is a real file on the media host; the prototype has no copy of
it, so the link stays visible (it documents the real form) but is inert. */}
Serves messages_root.image from MEDIA_DOMAIN/messages_images/{"{file}"} (config('media.MESSAGES_IMG_WEB_PATH')); the file is written to Storage::disk('public') under img/messages/. Legacy data only — the compose form never sets an image.
)}
Object{row.object}
Message{row.text}
Popup{row.pop_up ? "Yes" : "No"}
Message sent to{/* label inferred: backend.message_sent_to */}{me || "—"}
);
/* ---- Sent modal — GET /messages/viewsent/?id=.
forms/sentMessage.blade.php: message summary + read-receipt recipients
table (Username / Status / Reading date) with in-modal filters that the
real page passes back as extra query params (search_users csv + stato).
Close-only. */
const HmgSentModal = ({ row, onClose, onRefresh }) => {
const [uSel, setUSel] = React.useState([]); // staged username multi-select
const [stSel, setStSel] = React.useState("5"); // staged read-status; 5 = "no filter" sentinel (real select)
const [applied, setApplied] = React.useState({ users: [], stato: "5" });
const [syncedAt, setSyncedAt] = React.useState(null);
/* backend.update — the real link re-fetches this message's read receipts. The prototype's
receipts ARE the local sent store, so the honest equivalent is a genuine re-read of it:
the parent re-resolves the row by message_id and hands it back, the in-modal filters are
re-applied to whatever it now holds, and the time of the re-read is stamped. No claim of
a server round-trip is made. */
const doRefresh = () => { onRefresh && onRefresh(); setSyncedAt(Date.now()); };
const filtered = row.recipients.filter((r) => {
// Real quirk (MessagesController L123-133): when a username filter is
// present the status filter is IGNORED — the status branch is the else.
// Implemented faithfully.
//
if (applied.users.length) return applied.users.includes(r.username);
if (applied.stato === "1") return r.stato === 1; // filter matches stato=1 only — a stato=2 row displays as read but is not matched (real behavior)
if (applied.stato === "3") return r.stato === 0; // UI code 3 → stato = 0
return true;
});
const readCount = row.recipients.filter(r => r.stato === 1 || r.stato === 2).length;
return (
e.stopPropagation()}>
Sent message{/* label inferred: modal title */}
{hmgSyncStamp(syncedAt)}
{/* backend.update — in-modal re-fetch link on the real form; here a real re-read */}
{/* stato 1 OR 2 → read, else to read (sentMessage.blade L99) */}
{hmgFmtDT(r.visualizationTime)}
))}
);
};
/* ---- Compose modal — GET /messages/newMessage/ → POST /messages/sendNewMessage/.
Fields per forms/newMessage.blade.php: object (required), text (required,
RichTextEditor mirrored HTML-encoded into a hidden input; server re-runs
htmlspecialchars(html_entity_decode(...)) on both), receiver radio 3=Users
(default) / 2=Players (presence-only validation — the value just switches
the select2 user_types filter; a dead JS case '1' = all levels has no
matching radio), users_aviable[] multi (required), players_network /
users_network checkboxes, pop_up checkbox. Inline validation errors map to
backend.insert_object / insert_message / select_recipients /
no_users_available (labels inferred), returned as ajaxError + campierrati. */
const HmgCompose = ({ onClose, onSend }) => {
const [obj, setObj] = React.useState("");
const [text, setText] = React.useState("");
const [receiver, setReceiver] = React.useState("3"); // real radio values: 3 = Users (default checked), 2 = Players
const [sel, setSel] = React.useState([]); // selected HMG_DIR entries
const [q, setQ] = React.useState("");
const [netPlayers, setNetPlayers] = React.useState(false);
const [netUsers, setNetUsers] = React.useState(false);
const [popup, setPopup] = React.useState(false);
const [errs, setErrs] = React.useState({});
// Users radio → user_types [2,8,10,15,20] (ADMIN/MASTER/AGENT/PROMOTER/SHOP); Players → [30]
/* The recipient directory is the caller's own subtree, which RLS already
limits — so "who may I message" is answered by the same rule as "who may I
see", rather than by a 15-row array that answered neither. */
const dirFeed = useHrsFetch(() => window.sb.list("networkUsers", { limit: 2000 }), []);
const directory = React.useMemo(
() => (dirFeed.data || []).map(u => ({
id: u.id, u: u.username, level: Number(u.user_level),
role: (u.role && u.role.label) || "", path: String(u.path || ""),
})), [dirFeed.data]);
const pool = directory.filter(d => receiver === "2" ? d.level === 30 : d.level !== 30);
// searchUsers2: prefix username search `q`; after the first pick the real
// form passes parent_id = already-selected ids, so subsequent results are
// constrained to the selected users' subtrees (and always to the sender's
// own descendants via getChilds(true)).
const matches = q.trim() === "" ? [] : pool.filter((d) => {
if (sel.some(s => s.id === d.id)) return false;
if (!d.u.toLowerCase().startsWith(q.trim().toLowerCase())) return false;
/* ltree is DOTTED, and a subtree is descendant-OR-SELF. The slash came
from isystem's /1/5/12 paths; against real ltree it matched nothing, so
the recipient search silently returned no one. */
if (sel.length && !sel.some(s => d.path === s.path || String(d.path).startsWith(s.path + "."))) return false;
return true;
}).slice(0, 8);
// JS guard (newMessage.blade L116-144): network checkboxes are disabled and
// unchecked unless at least one selected recipient has user_level != 30.
const canNetwork = sel.some(s => s.level !== 30);
React.useEffect(() => { if (!canNetwork) { setNetPlayers(false); setNetUsers(false); } }, [canNetwork]);
const send = () => {
const e = {};
if (!obj.trim()) e.object = "Insert the object"; // label inferred: backend.insert_object
if (!text.trim()) e.text = "Insert the message"; // label inferred: backend.insert_message
if (!receiver) e.receiver = "Select the recipients"; // label inferred: backend.select_recipients (radio presence — always set here)
if (!sel.length) e.recipients = "No users available — select at least one recipient"; // label inferred: backend.no_users_available
setErrs(e);
if (Object.keys(e).length) return;
// Network expansion — players_network: every descendant PLAYER (level 30)
// of each selected recipient; users_network: descendants whereNotIn
// user_level [1,4,6,30]. Real code walks User::getChilds(true) chunked 1000.
//
// Real-platform BUG (ISYSTEM_REFERENCE §Messages, sendNewMessage L548/557):
// network-expanded rows use Message::updateOrCreate(['message_to' => $row->id], $datip)
// keyed ONLY on message_to, so a network send OVERWRITES the descendant's
// existing message row (object/message_id/submit_from/addedTime all
// replaced) instead of inserting a new one; only direct recipients get a
// proper Message::create (L540). The prototype implements the evident
// intent: every recipient — direct or network-expanded — receives a NEW
// per-recipient message row (deduped within this send).
//
const extra = [];
for (const s of sel) {
for (const d of directory) {
/* Same fix, and this one decides who a message is actually sent to:
a slash here meant the network expansion reached nobody. */
if (!(d.path === s.path || String(d.path).startsWith(s.path + "."))) continue;
const isPlayer = d.level === 30;
if ((netPlayers && isPlayer) || (netUsers && ![1, 4, 6, 30].includes(d.level))) {
if (!sel.some(x => x.id === d.id) && !extra.some(x => x.id === d.id)) extra.push(d);
}
}
}
onSend({ object: obj.trim(), text: text.trim(), popup, recipients: [...sel, ...extra] });
};
return (
e.stopPropagation()}>
New message{/* label inferred: backend.new_message */}
Message
setObj(e.target.value)} />
{errs.object &&
{errs.object}
}
{/* real widget: richtexteditor/rte.js, mirrored HTML-encoded into hidden name="text" on change */}