upstream-rocketchat/apps/meteor/server/lib/moderation/deleteReportedMessages.ts

import { api } from '@rocket.chat/core-services';
import type { IUser, IMessage } from '@rocket.chat/core-typings';
import { Messages, Uploads, ReadReceipts, ReadReceiptsArchive } from '@rocket.chat/models';

import { settings } from '../../settings';
import { FileUpload } from '../media/file-upload';

// heavily inspired from message delete taking place in the user deletion process
// in this path we don't care about the apps engine events - it's a "raw" bulk action
export async function deleteReportedMessages(messages: IMessage[], user: IUser): Promise<void> {
	const keepHistory = settings.get<boolean>('Message_KeepHistory');
	const showDeletedStatus = settings.get<boolean>('Message_ShowDeletedStatus');
	const files: string[] = [];
	const messageIds: string[] = [];
	for (const message of messages) {
		if (message.file) {
			files.push(message.file._id);
		}
		if (message.files && message.files.length > 0) {
			files.concat(message.files.map((file) => file._id));
		}
		messageIds.push(message._id);
	}
	if (keepHistory) {
		if (showDeletedStatus) {
			const cursor = Messages.find({ _id: { $in: messageIds } });

			for await (const doc of cursor) {
				await Messages.cloneAndSaveAsHistoryByRecord(
					doc,
					user as Required<Pick<IUser, '_id' | 'name'>> & { username: NonNullable<IUser['username']> },
				);
			}
		} else {
			await Messages.setHiddenByIds(messageIds, true);
		}

		await Uploads.updateMany({ _id: { $in: files } }, { $set: { _hidden: true } });
	} else {
		if (!showDeletedStatus) {
			await Messages.deleteMany({ _id: { $in: messageIds } });
		}
		await ReadReceipts.removeByMessageIds(messageIds);
		await ReadReceiptsArchive.removeByMessageIds(messageIds);

		const store = FileUpload.getStore('Uploads');
		await Promise.all(files.map((file) => store.deleteById(file)));
	}
	if (showDeletedStatus) {
		await Messages.setAsDeletedByIdsAndUser(messageIds, user as any);
	}

	const transformed = messages.reduce(
		(acc, { rid, _id }) => {
			if (!acc[rid]) {
				acc[rid] = [];
			}
			acc[rid].push(_id);
			return acc;
		},
		{} as Record<string, string[]>,
	);

	Object.entries(transformed).forEach(([rid, messageIds]) => {
		void api.broadcast('notify.deleteMessageBulk', rid, {
			rid,
			excludePinned: true,
			ignoreDiscussion: true,
			ts: { $gt: new Date() },
			users: [],
			ids: messageIds,
			showDeletedStatus,
		});
	});
}