@dosgato/api 0.0.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Texas State ETC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,74 @@
+# dosgato
+## Introduction
+This is a place to record ideas and code for an experimental new CMS for use at Texas State.
+
+The core concepts focus on our handling of data and versions, in an effort to preserve editing history, maximize API compatibility, and reduce system downtime.
+
+## Definitions
+### Content Object
+A single page or independent chunk of data. These are objects that will be created and edited by CMS editors during the course of creating their content.
+
+### Content Version
+Each content object will have a content version that increments each time a user makes a data change. We will maintain a limited version history for the object so that we can restore older versions of the content. An API parameter will allow clients to request a specific historical version of a content object.
+
+### Schema Version
+Each content object will have a schema, and a schema version that increments each time we need to alter structure. Each instance of the object will be tagged with the schema version the client was using when the editor saved the object. When returning a content object from the API, we will be able to alter the schema version up or down to match the client performing the request. This allows zero downtime upgrades without risk of corruption due to old clients in the wild.
+
+### Migration
+A migration is a block of code that converts a content object from one schema version to another. Typically migrations will be written so that they can both upgrade to and downgrade from a particular schema version. This is called a reversible migration.
+
+If a reversible migration is impossible to write, for example when a field is being deleted, we will have a non-reversible migration. All system updates including a non-reversible migration will require downtime, and clients older than that version will cease to function (see Minimum Schema Version below).
+
+Deletion of a non-required field might not crash, so we could theoretically avoid downtime, but in those cases we should write a migration downgrade where we set it to a default value.
+
+In general we should avoid non-reversible migrations as much as possible, to avoid making older clients incompatible.
+
+### Minimum Schema Version
+The earliest schema version after which all migrations are reversible. Each API request will contain the API/Schema version that the client expects, so that it always receives data structured in a way that it can handle. If the requested API version is less than the minimum schema version, the request will be rejected. That client will be required to upgrade (or refresh the page, in the case of an in-browser client).
+
+## Upgrade Process
+In order to preserve uptime, we can now follow a specific upgrade flow to avoid downtime:
+* Each update should consist of de-listing from the load balancer, then restarting with the latest docker image.
+* Update API services, one by one, until all are updated.
+* Update Client/UI services, one by one, until all are updated.
+
+This diagram illustrates the process.
+
+![Upgrade Process Flow Diagram](readme/upgradeflow2.png?raw=true)
+
+As you can see, when the API services are partially upgraded, the upgraded services simply need to downgrade schema versions on the way out to maintain compatibility. When all API services are prepared to serve the next schema version, clients may begin their upgrades.
+
+## Miscellaneous
+* No edits on old versions, must restore a version first to bring it to the top
+* Ensure that browser updates all client-side UI resources at the same time
+  * Forced refresh is unnecessary
+
+* Reading a page
+  * retrieve page data
+  * rewind to requested content version, if applicable
+  * run migrations to update to requested schema version
+  * return modified page data
+
+* Saving a page
+  * accept page from client, tagged with content version and schema version
+  * if there is already a content version with a higher number, abort with concurrency error
+  * save a new content version exactly as user provided it and tag with the incoming schema version
+
+* Restoring a page
+  * retrieve page
+  * rewind to requested content version
+  * save a new content version with page data exactly as it was, tagged with the old schema version
+
+* Deleting a page
+  * record the date in meta
+  * soft delete for 6 months
+
+## References
+* https://www.npmjs.com/package/rfc6902
+
+## Notes
+* The rendering server may pass a user token along to the API, or may pass a service token for anonymous access.
+  * The API should ensure that the service token only receives published/launched page data.
+  * Direct asset downloads will also pass through the rendering server.
+  * The API should never allow entirely unauthenticated access.
+* Need to think about first-class support for protected pages. Probably a shared secret with the cache boxes.

package/dist/access/access.model.d.ts

@@ -0,0 +1,2 @@
+export declare class Access {
+}

package/dist/access/access.model.js

@@ -0,0 +1,14 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { ObjectType } from 'type-graphql';
+let Access = class Access {
+};
+Access = __decorate([
+    ObjectType()
+], Access);
+export { Access };
+//# sourceMappingURL=access.model.js.map

package/dist/access/access.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.model.js","sourceRoot":"","sources":["../../src/access/access.model.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC,IAAa,MAAM,GAAnB,MAAa,MAAM;CAAG,CAAA;AAAT,MAAM;IADlB,UAAU,EAAE;GACA,MAAM,CAAG;SAAT,MAAM"}

package/dist/access/access.resolver.d.ts

@@ -0,0 +1,15 @@
+import { Context } from '@txstate-mws/graphql-server';
+import { UrlSafeString } from '../internal.js';
+export declare class AccessResolver {
+    access(ctx: Context): Promise<{}>;
+    createGroups(ctx: Context): Promise<boolean>;
+    viewGroupManager(ctx: Context): Promise<boolean>;
+    createRoles(ctx: Context): Promise<boolean>;
+    viewRoleManager(ctx: Context): Promise<boolean>;
+    createSites(ctx: Context): Promise<boolean>;
+    viewPageManager(ctx: Context): Promise<boolean>;
+    viewSiteManager(ctx: Context): Promise<boolean>;
+    viewAssetManager(ctx: Context): Promise<boolean>;
+    viewDataManager(ctx: Context): Promise<boolean>;
+    createGlobalData(ctx: Context, type: UrlSafeString): Promise<boolean>;
+}

package/dist/access/access.resolver.js

@@ -0,0 +1,133 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Context } from '@txstate-mws/graphql-server';
+import { Arg, Ctx, FieldResolver, Query, Resolver } from 'type-graphql';
+import { AssetService, DataService, GroupService, PageService, RoleService, UrlSafeString, SiteService, Access } from '../internal.js';
+let AccessResolver = class AccessResolver {
+    async access(ctx) {
+        return {};
+    }
+    async createGroups(ctx) {
+        return await ctx.svc(GroupService).mayCreate();
+    }
+    async viewGroupManager(ctx) {
+        return await ctx.svc(GroupService).mayViewManagerUI();
+    }
+    async createRoles(ctx) {
+        return await ctx.svc(RoleService).mayCreate();
+    }
+    async viewRoleManager(ctx) {
+        return await ctx.svc(RoleService).mayViewManagerUI();
+    }
+    async createSites(ctx) {
+        return await ctx.svc(SiteService).mayCreate();
+    }
+    async viewPageManager(ctx) {
+        return await ctx.svc(PageService).mayViewManagerUI();
+    }
+    async viewSiteManager(ctx) {
+        return await ctx.svc(SiteService).mayViewManagerUI();
+    }
+    async viewAssetManager(ctx) {
+        return await ctx.svc(AssetService).mayViewManagerUI();
+    }
+    async viewDataManager(ctx) {
+        return await ctx.svc(DataService).mayViewManagerUI();
+    }
+    async createGlobalData(ctx, type) {
+        return await ctx.svc(DataService).mayCreateGlobal();
+    }
+};
+__decorate([
+    Query(returns => Access, { description: 'Shows permissions for the currently authenticated user that are not related to a specific resource. Generally each resource has a `permissions` object stating all the things the currently authenticated user can do to or with that resource. This resolver is for determining permissions that are not related to any particular resource, like whether or not they should be able to view the user management interface.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "access", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to create groups.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "createGroups", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to create or edit one or more groups and should therefore see the group management UI.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "viewGroupManager", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to create roles.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "createRoles", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to create, edit, or add rules to one or more roles and should therefore see the role management UI.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "viewRoleManager", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to create sites.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "createSites", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to edit pages in one or more sites and should therefore see the page management UI.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "viewPageManager", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to edit, launch, or create sites and should see the site management UI.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "viewSiteManager", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to edit assets in one or more sites and should therefore see the asset management UI.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "viewAssetManager", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to edit data of one or more types and should therefore see the data management UI.' }),
+    __param(0, Ctx()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "viewDataManager", null);
+__decorate([
+    FieldResolver(returns => Boolean, { description: 'Currently authenticated user is able to create global data entries of the specified type.' }),
+    __param(0, Ctx()),
+    __param(1, Arg('type')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Context, UrlSafeString]),
+    __metadata("design:returntype", Promise)
+], AccessResolver.prototype, "createGlobalData", null);
+AccessResolver = __decorate([
+    Resolver(of => Access)
+], AccessResolver);
+export { AccessResolver };
+//# sourceMappingURL=access.resolver.js.map

package/dist/access/access.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.resolver.js","sourceRoot":"","sources":["../../src/access/access.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACrD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAGtI,IAAa,cAAc,GAA3B,MAAa,cAAc;IAEzB,KAAK,CAAC,MAAM,CAAS,GAAY;QAC/B,OAAO,EAAE,CAAA;IACX,CAAC;IAGD,KAAK,CAAC,YAAY,CAAS,GAAY;QACrC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,CAAA;IAChD,CAAC;IAGD,KAAK,CAAC,gBAAgB,CAAS,GAAY;QACzC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACvD,CAAC;IAGD,KAAK,CAAC,WAAW,CAAS,GAAY;QACpC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAA;IAC/C,CAAC;IAGD,KAAK,CAAC,eAAe,CAAS,GAAY;QACxC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC;IAGD,KAAK,CAAC,WAAW,CAAS,GAAY;QACpC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CAAA;IAC/C,CAAC;IAGD,KAAK,CAAC,eAAe,CAAS,GAAY;QACxC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC;IAGD,KAAK,CAAC,eAAe,CAAS,GAAY;QACxC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC;IAGD,KAAK,CAAC,gBAAgB,CAAS,GAAY;QACzC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACvD,CAAC;IAGD,KAAK,CAAC,eAAe,CAAS,GAAY;QACxC,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACtD,CAAC;IAGD,KAAK,CAAC,gBAAgB,CAAS,GAAY,EAAe,IAAmB;QAC3E,OAAO,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,EAAE,CAAA;IACrD,CAAC;CACF,CAAA;AArDC;IADC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,8ZAA8Z,EAAE,CAAC;IAC3b,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;4CAEhC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;IACxF,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;kDAEtC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,6HAA6H,EAAE,CAAC;IACzJ,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;sDAE1C;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,uDAAuD,EAAE,CAAC;IACxF,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;iDAErC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,0IAA0I,EAAE,CAAC;IACvK,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;qDAEzC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,uDAAuD,EAAE,CAAC;IACxF,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;iDAErC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,0HAA0H,EAAE,CAAC;IACvJ,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;qDAEzC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,8GAA8G,EAAE,CAAC;IAC3I,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;qDAEzC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,4HAA4H,EAAE,CAAC;IACxJ,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;sDAE1C;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,yHAAyH,EAAE,CAAC;IACtJ,WAAA,GAAG,EAAE,CAAA;;qCAAM,OAAO;;qDAEzC;AAGD;IADC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,2FAA2F,EAAE,CAAC;IACvH,WAAA,GAAG,EAAE,CAAA;IAAgB,WAAA,GAAG,CAAC,MAAM,CAAC,CAAA;;qCAArB,OAAO,EAAqB,aAAa;;sDAE5E;AAtDU,cAAc;IAD1B,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC;GACV,cAAc,CAuD1B;SAvDY,cAAc"}

package/dist/asset/asset.database.d.ts

@@ -0,0 +1,12 @@
+import { Asset, AssetFilter, AssetResize, VersionedService, CreateAssetInput, AssetFolder } from '../internal.js';
+import { DateTime } from 'luxon';
+export declare function getAssets(filter?: AssetFilter): Promise<Asset[]>;
+export declare function getResizes(assetIds: string[]): Promise<{
+    key: string;
+    value: AssetResize;
+}[]>;
+export declare function getLatestDownload(asset: Asset, resizeBinaryIds: number[]): Promise<DateTime>;
+export declare function createAsset(versionedService: VersionedService, userId: string, args: CreateAssetInput): Promise<Asset>;
+export declare function moveAsset(id: number, targetFolder: AssetFolder): Promise<number>;
+export declare function deleteAsset(id: number, userInternalId: number): Promise<number>;
+export declare function undeleteAsset(id: number): Promise<number>;

package/dist/asset/asset.database.js

@@ -0,0 +1,116 @@
+import db from 'mysql2-async/db';
+import { isNotNull, stringify } from 'txstate-utils';
+import { Asset, AssetResize, AssetFolder } from '../internal.js';
+import { DateTime } from 'luxon';
+function processFilters(filter) {
+    const binds = [];
+    const where = [];
+    const joins = new Map();
+    if (typeof filter !== 'undefined') {
+        if (filter.internalIds?.length) {
+            where.push(`assets.id IN (${db.in(binds, filter.internalIds)})`);
+        }
+        if (filter.ids?.length) {
+            where.push(`assets.dataId IN (${db.in(binds, filter.ids)})`);
+        }
+        if (filter.folderIds?.length) {
+            where.push(`assetfolders.guid IN (${db.in(binds, filter.folderIds)})`);
+            if (!joins.has('assetfolders')) {
+                joins.set('assetfolders', 'INNER JOIN assetfolders ON assets.folderId = assetfolders.id');
+            }
+        }
+        if (filter.folderInternalIds?.length) {
+            where.push(`assets.folderId IN (${db.in(binds, filter.folderInternalIds)})`);
+        }
+        if (filter.siteIds?.length) {
+            where.push(`assetfolders.siteId IN (${db.in(binds, filter.siteIds)})`);
+            if (!joins.has('assetfolders')) {
+                joins.set('assetfolders', 'INNER JOIN assetfolders ON assets.folderId = assetfolders.id');
+            }
+        }
+        if (isNotNull(filter.referenced)) {
+            // TODO
+        }
+        if (isNotNull(filter.deleted)) {
+            if (filter.deleted) {
+                where.push('assets.deletedAt IS NOT NULL');
+            }
+            else {
+                where.push('assets.deletedAt IS NULL');
+            }
+        }
+        if (filter.checksums?.length) {
+            where.push(`binaries.shasum IN (${db.in(binds, filter.checksums)})`);
+        }
+    }
+    return { binds, where, joins };
+}
+export async function getAssets(filter) {
+    const { binds, where, joins } = processFilters(filter);
+    const assets = await db.getall(`
+    SELECT assets.id, assets.dataId, assets.name, assets.folderId, assets.deletedAt, assets.deletedBy, binaries.bytes AS filesize, binaries.mime, binaries.shasum FROM assets
+    INNER JOIN binaries on assets.shasum = binaries.shasum
+    ${joins.size ? Array.from(joins.values()).join('\n') : ''}
+    WHERE (${where.join(') AND (')})`, binds);
+    return assets.map(a => new Asset(a));
+}
+export async function getResizes(assetIds) {
+    const binds = [];
+    const resizes = await db.getall(`SELECT assets.id, resizes.* FROM resizes
+  INNER JOIN binaries ON resizes.originalBinaryId = binaries.id
+  INNER JOIN assets ON binaries.shasum = assets.shasum
+  WHERE assets.id IN (${db.in(binds, assetIds)})`, binds);
+    return resizes.map(row => ({ key: String(row.assetId), value: new AssetResize(row) }));
+}
+export async function getLatestDownload(asset, resizeBinaryIds) {
+    const binds = [];
+    const binaryId = await db.getval(`SELECT binaries.id FROM binaries
+                                  INNER JOIN assets on assets.shasum = binaries.shasum
+                                  WHERE assets.id = ?`, [asset.internalId]);
+    if (!binaryId)
+        throw new Error(`Could not find binary for asset ${String(asset.name)}`);
+    console.log(`SELECT binaryId, year, month, day, CONCAT(year,month,day) AS dateconcat
+  FROM downloads
+  WHERE binaryId in (${db.in(binds, [binaryId, ...resizeBinaryIds])})
+  ORDER BY dateconcat DESC
+  LIMIT 1`);
+    console.log(binds);
+    const latestDownload = await db.getrow(`SELECT binaryId, year, month, day, CONCAT(year,month,day) AS dateconcat
+                                          FROM downloads
+                                          WHERE binaryId in (${db.in(binds, [binaryId, ...resizeBinaryIds])})
+                                          ORDER BY dateconcat DESC
+                                          LIMIT 1`, binds);
+    return DateTime.fromObject({ year: latestDownload.year, month: latestDownload.month, day: latestDownload.day });
+}
+export async function createAsset(versionedService, userId, args) {
+    return await db.transaction(async (db) => {
+        // TODO: What else should go in the data for an asset? What indexes does it need?
+        const dataId = await versionedService.create('asset', { shasum: args.checksum }, [{ name: 'type', values: [args.mime] }], userId, db);
+        const folderInternalId = await db.getval('SELECT id FROM assetfolders WHERE guid = ?', [args.folderId]);
+        // TODO: What goes in the meta field?
+        await db.insert(`
+      INSERT IGNORE INTO binaries (shasum, mime, meta, bytes)
+      VALUES(?, ?, ?, ?)`, [args.checksum, args.mime, stringify({}), args.size]);
+        const newInternalId = await db.insert(`
+      INSERT INTO assets (name, folderId, dataId, shasum)
+      VALUES(?, ?, ?, ?)`, [args.name, folderInternalId, dataId, args.checksum]);
+        return new Asset(await db.getrow('SELECT * FROM assets WHERE id=?', [newInternalId]));
+    });
+}
+export async function moveAsset(id, targetFolder) {
+    return await db.transaction(async (db) => {
+        const folder = new AssetFolder(await db.getrow('SELECT * FROM assetfolders WHERE id = ?', [targetFolder.internalId]));
+        // Ensure the target folder has not moved.
+        // Someone else may have moved it somewhere the current user does not have permission to create assets
+        if (folder.path !== targetFolder.path)
+            throw new Error('Target folder has moved since the mutation began.');
+        return await db.update('UPDATE assets set folderId = ? WHERE id = ?', [targetFolder.internalId, id]);
+    });
+}
+export async function deleteAsset(id, userInternalId) {
+    return await db.update('UPDATE assets SET deletedAt = NOW(), deletedBy = ? WHERE id = ?', [userInternalId, id]);
+}
+export async function undeleteAsset(id) {
+    return await db.update('UPDATE assets SET deletedBy = null, deletedAt = null WHERE id = ?', [id]);
+}
+//# sourceMappingURL=asset.database.js.map

package/dist/asset/asset.database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset.database.js","sourceRoot":"","sources":["../../src/asset/asset.database.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,iBAAiB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,KAAK,EAAe,WAAW,EAAsC,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhC,SAAS,cAAc,CAAE,MAAoB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEvC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;QACjC,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE;YAC9B,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;SACjE;QACD,IAAI,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;SAC7D;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE;gBAC9B,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,8DAA8D,CAAC,CAAA;aAC1F;SACF;QACD,IAAI,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE;YACpC,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;SAC7E;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE;YAC1B,KAAK,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACtE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE;gBAC9B,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,8DAA8D,CAAC,CAAA;aAC1F;SACF;QACD,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;YAChC,OAAO;SACR;QACD,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;YAC7B,IAAI,MAAM,CAAC,OAAO,EAAE;gBAClB,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;aAC3C;iBAAM;gBACL,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAA;aACvC;SACF;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;SACrE;KACF;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,MAAoB;IACnD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;;;MAG3B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;aAChD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAE,QAAkB;IAClD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;;;wBAGV,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACvD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAE,KAAY,EAAE,eAAyB;IAC9E,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAS;;sDAEW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IACzE,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACvF,OAAO,CAAC,GAAG,CAAC;;uBAES,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,eAAe,CAAC,CAAC;;UAEzD,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAClB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;;+DAEsB,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,eAAe,CAAC,CAAC;;kDAEzD,EAAE,KAAK,CAAC,CAAA;IAExD,OAAO,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAA;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,gBAAkC,EAAE,MAAc,EAAE,IAAsB;IAC3G,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;QACrC,iFAAiF;QACjF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;QACrI,MAAM,gBAAgB,GAAG,MAAM,EAAE,CAAC,MAAM,CAAS,4CAA4C,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC/G,qCAAqC;QACrC,MAAM,EAAE,CAAC,MAAM,CAAC;;yBAEK,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QAC5E,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;;yBAEjB,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7E,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,iCAAiC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,EAAU,EAAE,YAAyB;IACpE,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,yCAAyC,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACrH,0CAA0C;QAC1C,sGAAsG;QACtG,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QAC3G,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,6CAA6C,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAA;IACtG,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAE,EAAU,EAAE,cAAsB;IACnE,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,iEAAiE,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAA;AACjH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAE,EAAU;IAC7C,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,mEAAmE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AACnG,CAAC"}

package/dist/asset/asset.model.d.ts

@@ -0,0 +1,81 @@
+import { DateTime } from 'luxon';
+import { ValidatedResponse, ValidatedResponseArgs } from '@txstate-mws/graphql-server';
+import { UrlSafeString } from '../internal.js';
+export declare class BoxAttributes {
+    width: number;
+    height: number;
+    constructor(row: any);
+    static hasBox(row: any): boolean;
+}
+export declare class Asset {
+    internalId: number;
+    id: string;
+    name: UrlSafeString;
+    size: number;
+    mime: string;
+    extension: string;
+    box?: BoxAttributes;
+    checksum: string;
+    deleted: boolean;
+    deletedAt?: DateTime;
+    lastRawDownload?: DateTime;
+    deletedBy?: number;
+    folderInternalId: number;
+    dataId: string;
+    constructor(row: any);
+}
+export declare class AssetFilter {
+    internalIds?: number[];
+    ids?: string[];
+    siteIds?: string[];
+    links?: AssetLinkInput[];
+    checksums?: string[];
+    folderIds?: string[];
+    folderInternalIds?: number[];
+    names?: string[];
+    paths?: string[];
+    beneath?: string[];
+    parentPaths?: string[];
+    referenced?: boolean;
+    deleted?: boolean;
+}
+export declare class CreateAssetInput {
+    name: string;
+    folderId: string;
+    checksum: string;
+    mime: string;
+    size: number;
+}
+export declare class UpdateAssetInput {
+    name: string;
+    checksum: string;
+}
+export declare class AssetResponse extends ValidatedResponse {
+    asset?: Asset;
+    constructor(config: ValidatedResponseArgs & {
+        asset?: Asset;
+    });
+}
+export declare class AssetPermissions {
+}
+export declare enum AssetPermission {
+    UPDATE = "update",
+    MOVE = "move",
+    DELETE = "delete",
+    UNDELETE = "undelete"
+}
+export declare class AssetResize {
+    width: number;
+    height: number;
+    quality: number;
+    settings: any;
+    lastDownload: DateTime;
+    binaryId: number;
+    originalBinaryId: number;
+    constructor(row: any);
+}
+export declare class AssetLinkInput {
+    id: string;
+    path: string;
+    checksum: string;
+}