add post saving and character counters to some text boxes

build.maple

···
 	run = 'docker rm beep-database && docker volume rm beep-data'
 }
 
+task:run.watch = {
+	description = 'Watch/run beep'
+	category = 'run'
+	run = '${v} -d veb_livereload watch run ${v_main} config.maple'
+}
+
+task:run.watch.real = {
+	description = 'Watch/run beep using config.real.maple'
+	category = 'run'
+	run = '${v} watch run ${v_main} config.real.maple'
+}
+
 task:run = {
 	description = 'Run beep'
 	category = 'run'
-	run = '${v} -d veb_livereload watch run ${v_main} config.maple'
+	run = '${v} run ${v_main} config.maple'
 }
 
 task:run.real = {
 	description = 'Run beep using config.real.maple'
 	category = 'run'
-	run = '${v} -d veb_livereload watch run ${v_main} config.real.maple'
+	run = '${v} -d veb_livereload run ${v_main} config.real.maple'
 }
 
 task:cloc = {

doc/database_spec.md

···
 | `user_id` | int    | the user that receives this notification |
 | `summary` | string | the summary for this notification        |
 | `body`    | string | the full text for this notification      |
+
+## `SavedPost`
+
+> a list of saved posts for a user
+
+| name      | type | desc                                             |
+|-----------|------|--------------------------------------------------|
+| `id`      | int  | identifier for this entry, this is mostly unused |
+| `post_id` | int  | the id of the post this entry relates to         |
+| `user_id` | int  | the id of the user that saved this post          |
+| `saved`   | bool | if this post is saved                            |
+| `later`   | bool | if this post is saved in "read later"            |

doc/todo.md

···
 		created-before:<date>
 		is:admin
 		```
+- [ ] misc:replace `SEARCH *` with `SEARCH <column>`
 
 ## planing
 
 > p.s. when initially writing "planing," i made a typo. it should be "planning."
 > however, i will not be fixing it, because it is funny.
 
-- [ ] post:saving (add the post to a list of saved posts that a user can view later)
 - [ ] post:add more embedded link handling! (discord, github, gitlab, codeberg, etc)
 - [ ] user:follow other users (send notifications on new posts)
+- [ ] site:webhooks
+	- could be used so that a github webhook can send a message when a new commit is pushed to beep!
+- [ ] site:log new accounts, account deletions, etc etc in an admin-accessible site log
+	- this should be set up to only log things when an admin enables it in the site config, so as to only log when necessary
 
 ## ideas
 
 - [ ] user:per-user post pins
 	- could be used as an alternative for a bio to include more information perhaps
 - [ ] site:rss feed?
-- [ ] site:webhooks
-	- could be used so that a github webhook can send a message when a new commit is pushed to beep!
 
 ## done
 
···
 as images, music links, etc)
 	- should have special handling for spotify, apple music, youtube,
 	discord, and other common links. we want those ones to look fancy!
+- [x] post:saving (add the post to a list of saved posts that a user can view later)
 - [x] site:message of the day (admins can add a welcome message displayed on index.html)
 
 ## graveyard

src/database/post.v

···
 // search_for_posts searches for posts matching the given query.
 // todo: query options/filters, such as user:beep, !excluded-text, etc
 pub fn (app &DatabaseAccess) search_for_posts(query string, limit int, offset int) []PostSearchResult {
+	//TODO: SANATIZE
 	sql_query := "\
 	SELECT *, CASE
 		WHEN title LIKE '%${query}%' THEN 1

src/database/saved_post.v

···
+module database
+
+import entity { SavedPost, Post }
+
+// get_saved_posts_for gets all SavedPost objects for a given user.
+pub fn (app &DatabaseAccess) get_saved_posts_for(user_id int) []SavedPost {
+	saved_posts := sql app.db {
+		select from SavedPost where user_id == user_id && saved == true
+	} or { [] }
+	return saved_posts
+}
+
+// get_saved_posts_as_post_for gets all saved posts for a given user converted
+// to Post objects.
+pub fn (app &DatabaseAccess) get_saved_posts_as_post_for(user_id int) []Post {
+	saved_posts := sql app.db {
+		select from SavedPost where user_id == user_id && saved == true
+	} or { [] }
+	posts := saved_posts.map(fn [app] (it SavedPost) Post {
+		return app.get_post_by_id(it.post_id) or {
+			// if the post does not exist, we will remove it now
+			sql app.db {
+				delete from SavedPost where id == it.id
+			} or {
+				eprintln('get_saved_posts_as_post_for: failed to remove non-existent post from saved post: ${it}')
+			}
+			app.get_unknown_post()
+		}
+	}).filter(it.id != 0)
+	return posts
+}
+
+// get_saved_posts_as_post_for gets all posts saved for later for a given user
+// converted to Post objects.
+pub fn (app &DatabaseAccess) get_saved_for_later_posts_as_post_for(user_id int) []Post {
+	saved_posts := sql app.db {
+		select from SavedPost where user_id == user_id && later == true
+	} or { [] }
+	posts := saved_posts.map(fn [app] (it SavedPost) Post {
+		return app.get_post_by_id(it.post_id) or {
+			// if the post does not exist, we will remove it now
+			sql app.db {
+				delete from SavedPost where id == it.id
+			} or {
+				eprintln('get_saved_for_later_posts_as_post_for: failed to remove non-existent post from saved post: ${it}')
+			}
+			app.get_unknown_post()
+		}
+	}).filter(it.id != 0)
+	return posts
+}
+
+// get_user_post_save_status returns the SavedPost object representing the user
+// and post id. returns none if the post is not saved anywhere.
+pub fn (app &DatabaseAccess) get_user_post_save_status(user_id int, post_id int) ?SavedPost {
+	saved_posts := sql app.db {
+		select from SavedPost where user_id == user_id && post_id == post_id
+	} or { [] }
+	if saved_posts.len == 1 {
+		return saved_posts[0]
+	} else if saved_posts.len == 0 {
+		return none
+	} else {
+		eprintln('get_user_post_save_status: user `${user_id}` had multiple SavedPost entries for post `${post_id}')
+		return none
+	}
+}
+
+pub fn (app &DatabaseAccess) is_post_saved_by(user_id int, post_id int) bool {
+	saved_post := app.get_user_post_save_status(user_id, post_id) or {
+		return false
+	}
+	return saved_post.saved
+}
+
+pub fn (app &DatabaseAccess) is_post_saved_for_later_by(user_id int, post_id int) bool {
+	saved_post := app.get_user_post_save_status(user_id, post_id) or {
+		return false
+	}
+	return saved_post.later
+}
+
+// toggle_save_post (un)saves the given post for the user. returns true if this
+// succeeds and false otherwise.
+pub fn (app &DatabaseAccess) toggle_save_post(user_id int, post_id int) bool {
+	if s := app.get_user_post_save_status(user_id, post_id) {
+		if s.saved {
+			sql app.db {
+				update SavedPost set saved = false where id == s.id
+			} or {
+				eprintln('toggle_save_post: failed to unsave post (user_id: ${user_id}, post_id: ${post_id})')
+				return false
+			}
+			return true
+		} else {
+			sql app.db {
+				update SavedPost set saved = true where id == s.id
+			} or {
+				eprintln('toggle_save_post: failed to save post (user_id: ${user_id}, post_id: ${post_id})')
+				return false
+			}
+			return true
+		}
+	} else {
+		post := SavedPost{
+			user_id: user_id
+			post_id: post_id
+			saved: true
+			later: false
+		}
+		sql app.db {
+			insert post into SavedPost
+		} or {
+			eprintln('toggle_save_post: failed to create saved post: ${post}')
+			return false
+		}
+		return true
+	}
+}
+
+// toggle_save_for_later_post (un)saves the given post for later for the user.
+// returns true if this succeeds and false otherwise.
+pub fn (app &DatabaseAccess) toggle_save_for_later_post(user_id int, post_id int) bool {
+	if s := app.get_user_post_save_status(user_id, post_id) {
+		if s.later {
+			sql app.db {
+				update SavedPost set later = false where id == s.id
+			} or {
+				eprintln('toggle_save_post: failed to unsave post for later (user_id: ${user_id}, post_id: ${post_id})')
+				return false
+			}
+			return true
+		} else {
+			sql app.db {
+				update SavedPost set later = true where id == s.id
+			} or {
+				eprintln('toggle_save_post: failed to save post for later (user_id: ${user_id}, post_id: ${post_id})')
+				return false
+			}
+			return true
+		}
+	} else {
+		post := SavedPost{
+			user_id: user_id
+			post_id: post_id
+			saved: false
+			later: true
+		}
+		sql app.db {
+			insert post into SavedPost
+		} or {
+			eprintln('toggle_save_post: failed to create saved post for later: ${post}')
+			return false
+		}
+		return true
+	}
+}

src/database/user.v

···
 // search_for_users searches for posts matching the given query.
 // todo: query options/filters, such as created-after:<date>, created-before:<date>, etc
 pub fn (app &DatabaseAccess) search_for_users(query string, limit int, offset int) []User {
+	//TODO: SANATIZE
 	sql_query := "\
 	SELECT *, CASE
 		WHEN username LIKE '%${query}%' THEN 1

src/entity/saved_post.v

···
+module entity
+
+// SavedPost represents a saved post for a given user
+pub struct SavedPost {
+pub mut:
+	id      int @[primary; sql: serial]
+	post_id int
+	user_id int
+	saved   bool
+	later   bool
+}
+
+// can_remove returns true if the SavedPost is neither saved or saved for later.
+pub fn (post &SavedPost) can_remove() bool {
+	return !post.saved && !post.later
+}

src/main.v

···
 		create table entity.Like
 		create table entity.LikeCache
 		create table entity.Notification
+		create table entity.SavedPost
 	}!
 	println('<- done')
 

src/static/js/post.js

···
 	})
 	window.location.reload()
 }
+
+const save = async id => {
+	await fetch('/api/post/save?id=' + id, {
+		method: 'GET'
+	})
+	window.location.reload()
+}
+
+const save_for_later = async id => {
+	await fetch('/api/post/save_for_later?id=' + id, {
+		method: 'GET'
+	})
+	window.location.reload()
+}

src/static/js/text_area_counter.js

···
+// this script is used to provide character counters to textareas
+
+const add_character_counter = (textarea_id, p_id, max_len) => {
+	const textarea = document.getElementById(textarea_id)
+	const p = document.getElementById(p_id)
+	textarea.addEventListener('input', () => {
+		p.innerText = textarea.value.length + '/' + max_len
+	})
+	p.innerText = textarea.value.length + '/' + max_len
+}

src/templates/edit.html

···
 @include 'partial/header.html'
 
-<script src="/static/js/post.js"></script>
-<script src="/static/js/render_body.js"></script>
+<script src="/static/js/post.js" defer></script>
+<script src="/static/js/render_body.js" defer></script>
+<script src="/static/js/text_area_counter.js"></script>
 
 <h1>edit post</h1>
 
···
 			hidden
 			aria-hidden
 		>
+
+		<p id="title_chars">0/@{app.config.post.title_max_len}</p>
 		<input
 			type="text"
 			name="title"
···
 			required
 		>
 		<br>
+
+		<p id="body_chars">0/@{app.config.post.body_max_len}</p>
 		<textarea
 			name="body"
 			id="body"
···
 			required
 		>@post.body</textarea>
 		<br>
+
 		<input type="submit" value="save">
+	</form>
+
+	<script>
+		add_character_counter('title', 'title_chars', @{app.config.post.title_max_len})
+		add_character_counter('body', 'body_chars', @{app.config.post.body_max_len})
+	</script>
+</div>
+
+<hr>
+
+<div>
+	<h2>danger zone:</h2>
+	<form action="/api/post/delete" method="post">
+		<input
+			type="number"
+			name="id"
+			id="id"
+			placeholder="post id"
+			value="@post.id"
+			required aria-required
+			readonly aria-readonly
+			hidden aria-hidden
+		>
+		<input type="submit" value="delete">
 	</form>
 </div>
 

src/templates/index.html

···
 		@include 'components/post_small.html'
 		@end
 	</div>
+	<br>
 	@end
 
 	<h2>recent posts:</h2>

src/templates/post.html

···
 	<p><a href="/post/@{post.id}/reply">reply</a></p>
 	@end
 
-	@if ctx.is_logged_in() && post.author_id == user.id
-	<p><a href="/post/@{post.id}/edit">edit post</a></p>
-	@end
-
 	@if ctx.is_logged_in()
 	<br>
 	<div>
···
 			dislike
 			@end
 		</button>
+		<button onclick="save(@post.id)">
+			@if app.is_post_saved_by(user.id, post.id)
+			saved!
+			@else
+			save
+			@end
+		</button>
+		<button onclick="save_for_later(@post.id)">
+			@if app.is_post_saved_for_later_by(user.id, post.id)
+			saved for later!
+			@else
+			save for later
+			@end
+		</button>
 	</div>
 	@end
 
···
 	<h4>admin powers:</h4>
 	@end
 
-	<form action="/api/post/delete" method="post">
-		<input
-			type="number"
-			name="id"
-			id="id"
-			placeholder="post id"
-			value="@post.id"
-			required
-			readonly
-			hidden
-			aria-hidden
-		>
-		<input type="submit" value="delete">
-	</form>
+	@if post.author_id == user.id
+	<p><a href="/post/@{post.id}/edit">edit</a></p>
+	@end
 
 	@if user.admin
 	<form action="/api/post/pin" method="post">
···
 			id="id"
 			placeholder="post id"
 			value="@post.id"
-			required
-			readonly
-			hidden
-			aria-hidden
+			required aria-required
+			readonly aria-readonly
+			hidden aria-hidden
 		>
 		<input type="submit" value="pin">
 	</form>

src/templates/saved_posts.html

···
+@include 'partial/header.html'
+
+@if ctx.is_logged_in()
+
+<script src="/static/js/post.js"></script>
+
+<p><a href="/me">back</a></p>
+
+<h1>saved posts:</h1>
+
+<div>
+	@if posts.len > 0
+	@for post in posts
+	<!-- components/post_mini.html -->
+	<div class="post post-mini">
+		<p>
+			<a href="/user/@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).username}"><strong>@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).get_name()}</strong></a>:
+			<a href="/post/@post.id">@post.title</a>
+			<button onclick="save(@post.id)" style="display: inline-block;">unsave</button>
+		</p>
+	</div>
+	@end
+	@else
+	<p>none!</p>
+	@end
+</div>
+
+@else
+<p>uh oh, you need to be logged in to see this page</p>
+@end
+
+@include 'partial/footer.html'

src/templates/saved_posts_for_later.html

···
+@include 'partial/header.html'
+
+@if ctx.is_logged_in()
+
+<script src="/static/js/post.js"></script>
+
+<p><a href="/me">back</a></p>
+
+<h1>saved posts for later:</h1>
+
+<div>
+	@if posts.len > 0
+	@for post in posts
+	<!-- components/post_mini.html -->
+	<div class="post post-mini">
+		<p>
+			<a href="/user/@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).username}"><strong>@{(app.get_user_by_id(post.author_id) or { app.get_unknown_user() }).get_name()}</strong></a>:
+			<a href="/post/@post.id">@post.title</a>
+			<button onclick="save_for_later(@post.id)" style="display: inline-block;">unsave</button>
+		</p>
+	</div>
+	@end
+	@else
+	<p>none!</p>
+	@end
+</div>
+
+@else
+<p>uh oh, you need to be logged in to see this page</p>
+@end
+
+@include 'partial/footer.html'

src/templates/settings.html

···
 @include 'partial/header.html'
 
 @if ctx.is_logged_in()
+<script src="/static/js/text_area_counter.js"></script>
+
 <h1>user settings:</h1>
 
 <form action="/api/user/set_bio" method="post">
-	<label for="bio">bio:</label>
+	<label for="bio">bio: (<span id="bio_chars">0/@{app.config.user.bio_max_len}</span>)</label>
 	<br>
 	<textarea
 		name="bio"
···
 <hr>
 
 <form action="/api/user/set_pronouns" method="post">
-	<label for="pronouns">pronouns:</label>
+	<label for="pronouns">pronouns: (<span id="pronouns_chars">0/@{app.config.user.pronouns_max_len}</span>)</label>
 	<input
 		type="text"
 		name="pronouns"
···
 <hr>
 
 <form action="/api/user/set_nickname" method="post">
-	<label for="nickname">nickname:</label>
+	<label for="nickname">nickname: (<span id="nickname_chars">0/@{app.config.user.nickname_max_len}</span>)</label>
 	<input
 		type="text"
 		name="nickname"
···
 <form action="/api/user/set_nickname" method="post">
 	<input type="submit" value="reset nickname">
 </form>
+
+<script>
+	add_character_counter('bio', 'bio_chars', @{app.config.user.bio_max_len})
+	add_character_counter('pronouns', 'pronouns_chars', @{app.config.user.pronouns_max_len})
+	add_character_counter('nickname', 'nickname_chars', @{app.config.user.nickname_max_len})
+</script>
 
 @if app.config.instance.allow_changing_theme
 <hr>

src/templates/user.html

···
 </h1>
 
 @if app.logged_in_as(mut ctx, viewing.id)
+<script src="/static/js/text_area_counter.js"></script>
+
 <p>this is you!</p>
 
 <div>
 	<form action="/api/post/new_post" method="post">
 		<h2>new post:</h2>
 
+		<p id="title_chars">0/@{app.config.post.title_max_len}</p>
 		<input
 			type="text"
 			name="title"
···
 			pattern="@app.config.post.title_pattern"
 			placeholder="title"
 			required aria-required
+			autocomplete="off" aria-autocomplete="off"
 		>
 		<br>
 
+		<p id="body_chars">0/@{app.config.post.body_max_len}</p>
 		<textarea
 			name="body"
 			id="body"
···
 			cols="30"
 			placeholder="body"
 			required aria-required
+			autocomplete="off" aria-autocomplete="off"
 		></textarea>
 		<br>
 
 		<input type="submit" value="post!">
 	</form>
+
+	<script>
+		add_character_counter('title', 'title_chars', @{app.config.post.title_max_len})
+		add_character_counter('body', 'body_chars', @{app.config.post.body_max_len})
+	</script>
 </div>
+<hr>
 @end
 
 @if viewing.bio != ''
···
 	<h2>bio:</h2>
 	<pre id="bio">@viewing.bio</pre>
 </div>
+<hr>
+@end
+
+@if app.logged_in_as(mut ctx, viewing.id)
+<div>
+	<p><a href="/me/saved">saved posts</a></p>
+	<p><a href="/me/saved_for_later">saved for later</a></p>
+</div>
+<hr>
 @end
 
 <div>
 	<h2>recent posts:</h2>
-	@for post in app.get_posts_from_user(viewing.id, 10)
+	@if posts.len > 0
+	@for post in posts
 	@include 'components/post_small.html'
 	@end
+	@else
+	<p>no posts!</p>
+	@end
 </div>
 
 @if ctx.is_logged_in() && user.admin
+<hr>
+
 <div>
 	<h2>admin powers:</h2>
 	<form action="/api/user/set_muted" method="post">

src/webapp/api.v

···
 	}
 }
 
+@['/api/post/save']
+fn (mut app App) api_post_save(mut ctx Context, id int) veb.Result {
+	user := app.whoami(mut ctx) or { return ctx.unauthorized('not logged in') }
+
+	if app.get_post_by_id(id) != none {
+		if app.toggle_save_post(user.id, id) {
+			return ctx.text('toggled save')
+		} else {
+			return ctx.server_error('failed to save post')
+		}
+	} else {
+		return ctx.server_error('post does not exist')
+	}
+}
+
+@['/api/post/save_for_later']
+fn (mut app App) api_post_save_for_later(mut ctx Context, id int) veb.Result {
+	user := app.whoami(mut ctx) or { return ctx.unauthorized('not logged in') }
+
+	if app.get_post_by_id(id) != none {
+		if app.toggle_save_for_later_post(user.id, id) {
+			return ctx.text('toggled save')
+		} else {
+			return ctx.server_error('failed to save post')
+		}
+	} else {
+		return ctx.server_error('post does not exist')
+	}
+}
+
 @['/api/post/get_title']
 fn (mut app App) api_post_get_title(mut ctx Context, id int) veb.Result {
 	post := app.get_post_by_id(id) or { return ctx.server_error('no such post') }

src/webapp/pages.v

···
 	return ctx.redirect('/user/${user.username}')
 }
 
+@['/me/saved']
+fn (mut app App) me_saved(mut ctx Context) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('not logged in')
+		return ctx.redirect('/login')
+	}
+	ctx.title = '${app.config.instance.name} - saved posts'
+	posts := app.get_saved_posts_as_post_for(user.id)
+	return $veb.html('../templates/saved_posts.html')
+}
+
+@['/me/saved_for_later']
+fn (mut app App) me_saved_for_later(mut ctx Context) veb.Result {
+	user := app.whoami(mut ctx) or {
+		ctx.error('not logged in')
+		return ctx.redirect('/login')
+	}
+	ctx.title = '${app.config.instance.name} - posts saved for later'
+	posts := app.get_saved_for_later_posts_as_post_for(user.id)
+	return $veb.html('../templates/saved_posts_for_later.html')
+}
+
 fn (mut app App) settings(mut ctx Context) veb.Result {
 	user := app.whoami(mut ctx) or {
 		ctx.error('not logged in')
···
 		return ctx.redirect('/')
 	}
 	ctx.title = '${app.config.instance.name} - ${user.get_name()}'
+	posts := app.get_posts_from_user(viewing.id, 10)
 	return $veb.html('../templates/user.html')
 }