@hollware/server 1.0.0-rc.0 → 1.0.0-rc.2

package/dist/{store-DjA9s95l.mjs → store-ApxKV0Sc.mjs}

@@ -726,6 +726,40 @@ sqliteTable("audit_log", {
 	check("audit_log_json", sql`(${t.actorMeta} IS NULL OR json_valid(${t.actorMeta})) AND (${t.detail} IS NULL OR json_valid(${t.detail}))`),
 	check("audit_log_sizes", sql`length(${t.action}) <= 64 AND (${t.detail} IS NULL OR length(${t.detail}) <= 2000) AND (${t.actorMeta} IS NULL OR length(${t.actorMeta}) <= 2000)`)
 ]);
+sqliteTable("assets", {
+	id: id("ast"),
+	siteId: siteId(),
+	sha256: text("sha256").notNull(),
+	/** The media type of the file served: the converted one, or the original kept as it came. */
+	format: text("format").notNull(),
+	/** In pixels; `null` for an SVG, which has no fixed size. */
+	width: integer("width"),
+	height: integer("height"),
+	bytes: integer("bytes").notNull(),
+	originalFormat: text("original_format").notNull(),
+	originalBytes: integer("original_bytes").notNull(),
+	alt: text("alt").notNull(),
+	filename: text("filename").notNull(),
+	/** The person whose token or session uploaded it. */
+	createdBy: text("created_by").notNull(),
+	...timestamps()
+}, (t) => [
+	unique("assets_id_site").on(t.id, t.siteId),
+	unique("assets_sha256").on(t.siteId, t.sha256),
+	index("assets_site_time").on(t.siteId, t.createdAt, t.id),
+	foreignKey({
+		name: "assets_site",
+		columns: [t.siteId],
+		foreignColumns: [sites.id]
+	}),
+	foreignKey({
+		name: "assets_creator",
+		columns: [t.createdBy],
+		foreignColumns: [users.id]
+	}),
+	check("assets_formats", sql`${t.format} IN ('image/jpeg', 'image/png', 'image/webp', 'image/avif', 'image/gif', 'image/svg+xml') AND ${t.originalFormat} IN ('image/jpeg', 'image/png', 'image/webp', 'image/avif', 'image/gif', 'image/svg+xml')`),
+	check("assets_sizes", sql`${t.bytes} > 0 AND ${t.originalBytes} BETWEEN 1 AND 10485760 AND length(${t.alt}) BETWEEN 1 AND 500 AND length(${t.filename}) BETWEEN 1 AND 200 AND length(${t.sha256}) = 64`)
+]);
 //#endregion
 //#region src/identity/secrets.ts
 /**

package/migrations/0017_assets.sql

@@ -0,0 +1,42 @@
+-- Generated by drizzle-kit, then edited by hand (ADR-023): the triggers at the end are not in the
+-- schema, since drizzle-kit does not model them; append-only.workerd.test.ts lists them after
+-- every migration.
+--
+-- The images of a site (ADR-038). An asset is never deleted, since a revision may name it, and
+-- nothing of it changes but its alt: its id is the hash of its bytes, and R2 holds those bytes.
+CREATE TABLE `assets` (
+	`id` text PRIMARY KEY NOT NULL,
+	`site_id` text NOT NULL,
+	`sha256` text NOT NULL,
+	`format` text NOT NULL,
+	`width` integer,
+	`height` integer,
+	`bytes` integer NOT NULL,
+	`original_format` text NOT NULL,
+	`original_bytes` integer NOT NULL,
+	`alt` text NOT NULL,
+	`filename` text NOT NULL,
+	`created_by` text NOT NULL,
+	`created_at` text NOT NULL,
+	`updated_at` text NOT NULL,
+	FOREIGN KEY (`site_id`) REFERENCES `sites`(`id`) ON UPDATE no action ON DELETE no action,
+	FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE no action,
+	CONSTRAINT "assets_formats" CHECK("assets"."format" IN ('image/jpeg', 'image/png', 'image/webp', 'image/avif', 'image/gif', 'image/svg+xml') AND "assets"."original_format" IN ('image/jpeg', 'image/png', 'image/webp', 'image/avif', 'image/gif', 'image/svg+xml')),
+	CONSTRAINT "assets_sizes" CHECK("assets"."bytes" > 0 AND "assets"."original_bytes" BETWEEN 1 AND 10485760 AND length("assets"."alt") BETWEEN 1 AND 500 AND length("assets"."filename") BETWEEN 1 AND 200 AND length("assets"."sha256") = 64)
+);
+--> statement-breakpoint
+CREATE INDEX `assets_site_time` ON `assets` (`site_id`,`created_at`,`id`);--> statement-breakpoint
+CREATE UNIQUE INDEX `assets_id_site` ON `assets` (`id`,`site_id`);--> statement-breakpoint
+CREATE UNIQUE INDEX `assets_sha256` ON `assets` (`site_id`,`sha256`);
+--> statement-breakpoint
+CREATE TRIGGER `assets_no_delete`
+BEFORE DELETE ON `assets`
+BEGIN
+	SELECT RAISE(ABORT, 'append-only: an asset is never deleted, since a revision may name it');
+END;
+--> statement-breakpoint
+CREATE TRIGGER `assets_immutable`
+BEFORE UPDATE OF `id`, `site_id`, `sha256`, `format`, `width`, `height`, `bytes`, `original_format`, `original_bytes`, `filename`, `created_by`, `created_at` ON `assets`
+BEGIN
+	SELECT RAISE(ABORT, 'append-only: only the alt of an asset changes');
+END;