Function proposeContentForUser

server/src/routes/content.ts:365–646

(
  user: ContentUser,
  request: ProposeContentRequest
)

 * Use this from internal services like Addie to bypass HTTP authentication.
 */
export async function proposeContentForUser(
  user: ContentUser,
  request: ProposeContentRequest
): Promise<ProposeContentResult> {
  const {
    title,
    subtitle,
    content,
    content_type = 'article',
    external_url,
    external_site_name,
    excerpt,
    category,
    tags = [],
    author_title: requestAuthorTitle,
    featured_image_url,
    content_origin = 'member',
    collection,
    authors,
    status: requestedStatus,
  } = request;

  // Per-user rate check — bounds every entry path to proposeContentForUser,
  // including Addie's MCP tool handler that bypasses HTTP middleware.
  const rate = checkProposeRateLimit(user.id);
  if (!rate.ok) {
    const retrySeconds = Math.max(1, Math.ceil(rate.retryAfterMs / 1000));
    logger.warn({ userId: user.id, retrySeconds }, 'proposeContentForUser rate-limited');
    return {
      success: false,
      error: `Submission rate limit exceeded (${PROPOSE_MAX_PER_WINDOW} per ${PROPOSE_WINDOW_MS / 60000} minutes). Try again in ${retrySeconds} seconds.`,
    };
  }

  // Validate required fields
  if (!title) {
    return { success: false, error: 'title is required' };
  }

  // Field length validation — mirror DB column limits so callers get a
  // friendly 400 instead of the Postgres "value too long" → HTTP 500
  // path we were hitting (see #2734). The DB schema is authoritative;
  // these constants just surface the limit before we hit the insert.
  if (title.length > 500) {
    return { success: false, error: `title is too long (max 500 characters; got ${title.length})` };
  }
  if (subtitle && subtitle.length > 1000) {
    return { success: false, error: `subtitle is too long (max 1000 characters; got ${subtitle.length})` };
  }
  if (requestAuthorTitle && requestAuthorTitle.length > 255) {
    return { success: false, error: `author_title is too long (max 255 characters; got ${requestAuthorTitle.length})` };
  }
  if (external_site_name && external_site_name.length > 255) {
    return { success: false, error: `external_site_name is too long (max 255 characters; got ${external_site_name.length})` };
  }

  // Support both old format (collection.type + committee_slug) and new format (just committee_slug)
  const committeeSlug = collection?.committee_slug || collection?.slug;