Update app.py

app.py

@@ -28,16 +28,15 @@ app.add_middleware(
 PERSISTENT_ROOT = os.environ.get("PERSISTENT_DIR", "/data")
 CHAT_DIR = os.path.join(PERSISTENT_ROOT, "chat")
 if not os.path.isdir(PERSISTENT_ROOT):
-    # Fall back locally if /data isn't available
     CHAT_DIR = os.path.join(".", "data", "chat")
 os.makedirs(CHAT_DIR, exist_ok=True)
 
 def _chat_file_for(video_id: str) -> str:
-    # Stable filename; avoids path traversal and huge names
+    # Stable filename to avoid path traversal
     h = hashlib.sha256(video_id.encode("utf-8")).hexdigest()[:32]
     return os.path.join(CHAT_DIR, f"{h}.jsonl")
 
-# Per-file asyncio locks (process-local)
+# Async file locks
 app.state.chat_locks = {}
 
 def _lock_for(path: str) -> asyncio.Lock:
@@ -82,35 +81,67 @@ class NewMessage(BaseModel):
     text: str = Field(..., min_length=1, max_length=5000)
 
 @app.get("/chat/{video_id}")
-async def get_messages(video_id: str):
-    messages = app.state.chat_storage.get(video_id, [])
-    return {
-        "video_id": video_id,
-        "count": len(messages),
-        "messages": messages
-    }
+async def get_messages(video_id: str, limit: int = 50, since: Optional[str] = None):
+    """
+    Fetch messages for a video.
+    - limit: max messages (default 50)
+    - since: ISO8601 timestamp; return only messages newer than this
+    """
+    limit = max(1, min(limit, 200))
+    path = _chat_file_for(video_id)
+    items = await _read_jsonl(path)
+
+    if since:
+        try:
+            since_dt = datetime.fromisoformat(since.replace("Z", "+00:00"))
+            items = [
+                m for m in items
+                if datetime.fromisoformat(str(m.get("created_at", "")).replace("Z", "+00:00")) > since_dt
+            ]
+        except Exception:
+            pass  # Ignore bad since param
 
+    items.sort(key=lambda m: m.get("created_at", ""))
+    if len(items) > limit:
+        items = items[-limit:]
 
-@app.post("/chat/{video_id}")
-async def send_message(video_id: str, msg: ChatMessage, request: Request):
-    if video_id not in app.state.chat_storage:
-        app.state.chat_storage[video_id] = []
+    return {"video_id": video_id, "count": len(items), "messages": items}
 
-    message = {
-        "id": uuid.uuid4().hex[:16],
+@app.post("/chat/{video_id}")
+async def post_message(video_id: str, msg: NewMessage, request: Request):
+    """
+    Append a message to a video's chat.
+    Body: { "author": "Ross", "text": "hello" }
+    """
+    path = _chat_file_for(video_id)
+    lock = _lock_for(path)
+
+    author = _valid_author(msg.author)
+    text = _valid_text(msg.text)
+    if not text:
+        return {"ok": False, "error": "Empty message"}
+
+    created = _now_iso()
+    mid = hashlib.sha1(f"{video_id}|{author}|{created}|{text}".encode("utf-8")).hexdigest()[:16]
+    ip = request.client.host if request and request.client else None
+
+    record = {
+        "id": mid,
         "video_id": video_id,
-        "author": msg.user,  # ✅ FIXED: use provided username
-        "text": msg.text,
-        "created_at": datetime.utcnow().isoformat(),
-        "ip": request.client.host if request.client else "unknown",
-        "ua": request.headers.get("user-agent", "")
+        "author": author,  # ✅ FIXED: uses frontend-provided name
+        "text": text,
+        "created_at": created,
+        "ip": ip,
+        "ua": request.headers.get("user-agent", "")[:200]
     }
 
-    app.state.chat_storage[video_id].append(message)
-    return {"status": "ok", "message": message}
+    async with lock:
+        await _append_jsonl(path, record)
+
+    return {"ok": True, "message": record}
 
 # ---------------------------
-# (Your original iCloud album endpoints — unchanged)
+# (Original iCloud album endpoints)
 # ---------------------------
 BASE_62_MAP = {c: i for i, c in enumerate("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz")}