@opengis/fastify-table 2.4.4 → 2.4.6

package/dist/server/migrations/crm.sql

@@ -46,6 +46,7 @@ COMMENT ON COLUMN crm.notifications.body is 'Зміст повідомлення
 COMMENT ON COLUMN crm.notifications.link is 'Посилання на об''єкт';
 COMMENT ON COLUMN crm.notifications.author_id is 'ID користувача автора повідомлення';
 COMMENT ON COLUMN crm.notifications.entity_id is 'ID на об''єкту';
+COMMENT ON COLUMN crm.notifications.entity_id is 'Сутність об''єкту';
 
 -- crm.files
 -- DROP TABLE IF EXISTS crm.files;
@@ -159,7 +160,11 @@ CREATE TABLE if not exists crm.reactions (
     reaction_id text default next_id() PRIMARY KEY,
     created_by text NOT NULL,
     entity_id text NOT NULL,
+    entity_type text,
     reaction_type text NOT NULL check (reaction_type in ('like', 'love', 'hate', 'wow', 'sad', 'angry')),
     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
     FOREIGN KEY (created_by) REFERENCES admin.users(uid)
-);
+);
+
+alter table crm.reactions add column if not exists entity_type text;
+alter table crm.notifications add column if not exists entity_type text;

package/dist/server/plugins/upload/startUpload.d.ts

@@ -1,8 +1,9 @@
-export default function startUpload({ host, id, fileName, size, subdir, }: {
+export default function startUpload({ host, id, fileName, size, subdir, originalFilename, }: {
     host?: string;
     id?: string;
     fileName: string;
     size: number;
     subdir?: string;
+    originalFilename?: boolean;
 }): Promise<any>;
 //# sourceMappingURL=startUpload.d.ts.map

package/dist/server/plugins/upload/startUpload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startUpload.d.ts","sourceRoot":"","sources":["../../../../server/plugins/upload/startUpload.ts"],"names":[],"mappings":"AAoBA,wBAA8B,WAAW,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,MAAM,GACP,EAAE;IACD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,gBAyFA"}
+{"version":3,"file":"startUpload.d.ts","sourceRoot":"","sources":["../../../../server/plugins/upload/startUpload.ts"],"names":[],"mappings":"AAoBA,wBAA8B,WAAW,CAAC,EACxC,IAAI,EACJ,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,gBAAwB,GACzB,EAAE;IACD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,gBA6FA"}

package/dist/server/plugins/upload/startUpload.js

@@ -6,17 +6,21 @@ import getUploadStatus from "./getUploadStatus.js";
 import { prefix, fileDir, metaDir, uploadChunkDirectory, fetchTimeoutMs, } from "./index.js";
 import mimes from "../file/providers/mime/mimes.js";
 import { startUpload as startUploadS3 } from "./s3.js";
-import { BadRequestError } from "../../../errors.js";
+import { BadRequestError, NotImplementedError } from "../../../errors.js";
 const { chunkSize = 5242880 } = config;
-export default async function startUpload({ host, id, fileName, size, subdir, }) {
+export default async function startUpload({ host, id, fileName, size, subdir, originalFilename = false, }) {
     if (subdir && (typeof subdir !== "string" || subdir.includes(".."))) {
         throw BadRequestError("invalid params: subdir");
     }
+    if (originalFilename) {
+        throw NotImplementedError("currently not supported");
+    }
     if (!host) {
         const id1 = id || randomUUID();
         const extension = path.extname(fileName).substring(1);
+        const yearMonthDay = subdir ? "" : new Date().toISOString().split("T")[0];
         const relativeDirpath = path
-            .join(uploadChunkDirectory, subdir || "")
+            .join(uploadChunkDirectory, subdir || "", yearMonthDay || "")
             .replace(/\\/g, "/");
         if (config.s3) {
             const filepath = path.posix.join(config.folder || "", relativeDirpath, `${id1}.${extension}`);

package/dist/server/routes/widget/controllers/widget.set.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"widget.set.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/controllers/widget.set.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAqC5C,wBAA8B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY;;;;;;GAqHpE"}
+{"version":3,"file":"widget.set.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/controllers/widget.set.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAqC5C,wBAA8B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY;;;;;;GA8HpE"}

package/dist/server/routes/widget/controllers/widget.set.js

@@ -109,6 +109,11 @@ export default async function widgetSet(req, reply) {
             data,
             uid: user?.uid,
         });
+    // put w/ out file
+    if (type === "gallery" && body?.ismain && id) {
+        await pg.query(`update crm.files set ismain=false 
+        where entity_id=$1 and file_id<>$2`, [objectid, id]);
+    }
     return reply.status(200).send({
         rowCount: result.rowCount,
         data: "ok",

package/dist/server/routes/widget/hook/onWidgetSet.d.ts

@@ -1,2 +1,2 @@
-export default function onWidgetSet({ pg, id, objectid, type, payload }: any): Promise<null>;
+export default function onWidgetSet({ pg, id, objectid, entityType, type, payload, }: any): Promise<null>;
 //# sourceMappingURL=onWidgetSet.d.ts.map

package/dist/server/routes/widget/hook/onWidgetSet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"onWidgetSet.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/hook/onWidgetSet.ts"],"names":[],"mappings":"AAEA,wBAA8B,WAAW,CAAC,EACxC,EAAqB,EACrB,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,OAAY,EACb,EAAE,GAAG,iBAQL"}
+{"version":3,"file":"onWidgetSet.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/hook/onWidgetSet.ts"],"names":[],"mappings":"AAEA,wBAA8B,WAAW,CAAC,EACxC,EAAqB,EACrB,EAAE,EACF,QAAQ,EACR,UAAU,EACV,IAAI,EACJ,OAAY,GACb,EAAE,GAAG,iBAiBL"}

package/dist/server/routes/widget/hook/onWidgetSet.js

@@ -1,10 +1,13 @@
-import pgClients from '../../../plugins/pg/pgClients.js';
-export default async function onWidgetSet({ pg = pgClients.client, id, objectid, type, payload = {} }) {
-    if (!id || !objectid || type !== 'gallery') {
+import pgClients from "../../../plugins/pg/pgClients.js";
+export default async function onWidgetSet({ pg = pgClients.client, id, objectid, entityType, type, payload = {}, }) {
+    if (!id || !objectid || type !== "gallery") {
         return null;
     }
-    if (payload?.ismain) {
-        await pg.query('update crm.files set ismain=false where entity_id=$1 and file_id<>$2', [objectid, id]);
+    if (payload?.ismain && !entityType) {
+        await pg.query("update crm.files set ismain=false where entity_id=$1 and file_id<>$2", [objectid, id]);
+    }
+    if (payload?.ismain && entityType) {
+        await pg.query("update crm.files set ismain=false where entity_id=$1 and entity_type=$2 and file_id<>$3", [objectid, entityType, id]);
     }
     return null;
 }

package/dist/server/routes/widget/index.d.ts

@@ -1,2 +1,2 @@
-export default function route(app: any, opt?: any): void;
+export default function route(app: any): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/server/routes/widget/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/widget/index.ts"],"names":[],"mappings":"AA2CA,MAAM,CAAC,OAAO,UAAU,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAE,GAAQ,QAKpD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/routes/widget/index.ts"],"names":[],"mappings":"AAkDA,MAAM,CAAC,OAAO,UAAU,KAAK,CAAC,GAAG,EAAE,GAAG,QAmHrC"}

package/dist/server/routes/widget/index.js

@@ -4,6 +4,10 @@ import widgetSet from "./controllers/widget.set.js";
 import widgetGet from "./controllers/widget.get.js";
 import fileEdit from "./controllers/file.edit.js";
 import onWidgetSet from "./hook/onWidgetSet.js";
+import widgetEntityGet from "./services/widget.entity.get.js";
+import widgetEntitySet from "./services/widget.entity.set.js";
+import widgetEntityDel from "./services/widget.entity.del.js";
+import uploadMultiPart from "../../plugins/file/uploadMultiPart.js";
 const tags = ["core", "widget"];
 const tableSchema = {
     params: {
@@ -20,6 +24,7 @@ const tableSchema = {
                     "reaction",
                 ],
             },
+            entityType: { type: "string", pattern: "^([\\w\\d_.]+)$" },
             objectid: { type: "string", pattern: "^([\\d\\w]+)$" },
             id: { type: "string", pattern: "^([\\d\\w]+)$" },
         },
@@ -34,9 +39,80 @@ const tableSchema = {
 addHook("onWidgetSet", onWidgetSet);
 const policy = "L0";
 const params = { config: { tags, policy }, schema: tableSchema };
-export default function route(app, opt = {}) {
+export default function route(app) {
+    app.get("/widget/:type/:entityType/:objectid", params, async (req) => {
+        const result = await widgetEntityGet({
+            type: req.params.type,
+            entityType: req.params.entityType,
+            objectid: req.params.objectid,
+            uid: req.user?.uid,
+            userName: req.user?.user_name,
+            debug: req.query.debug && req.user?.user_type?.includes?.("admin"),
+        }, req.pg);
+        return result;
+    });
+    app.post("/widget/:type/:entityType/:objectid", params, async (req) => {
+        if (["gallery", "file"].includes(req.params.type) &&
+            req.headers["content-type"]?.startsWith("multipart/form-data")) {
+            const file = await uploadMultiPart(req);
+            const result = await widgetEntitySet({
+                type: req.params.type,
+                entityType: req.params.entityType,
+                objectid: req.params.objectid,
+                uid: req.user?.uid,
+                file,
+            }, req.pg);
+            return result;
+        }
+        const result = await widgetEntitySet({
+            type: req.params.type,
+            entityType: req.params.entityType,
+            objectid: req.params.objectid,
+            uid: req.user?.uid,
+            reqPath: req.path,
+            body: req.body,
+        }, req.pg);
+        return result;
+    });
+    app.put("/widget/:type/:entityType/:objectid/:id", params, async (req) => {
+        if (["gallery", "file"].includes(req.params.type) &&
+            req.headers["content-type"]?.startsWith("multipart/form-data")) {
+            const file = await uploadMultiPart(req);
+            const result = await widgetEntitySet({
+                type: req.params.type,
+                entityType: req.params.entityType,
+                objectid: req.params.objectid,
+                id: req.params.id,
+                uid: req.user?.uid,
+                file,
+            }, req.pg);
+            return result;
+        }
+        const result = await widgetEntitySet({
+            type: req.params.type,
+            entityType: req.params.entityType,
+            objectid: req.params.objectid,
+            id: req.params.id,
+            uid: req.user?.uid,
+            reqPath: req.path,
+            body: req.body,
+        }, req.pg);
+        return result;
+    });
+    app.delete("/widget/:type/:entityType/:objectid/:id", params, async (req) => {
+        const result = await widgetEntityDel({
+            type: req.params.type,
+            entityType: req.params.entityType,
+            objectid: req.params.objectid,
+            id: req.params.id,
+            uid: req.user?.uid,
+            userName: req.user?.user_name,
+        }, req.pg);
+        return result;
+    });
+    app.get("/widget/:type/:objectid", params, widgetGet);
+    app.post("/widget/:type/:objectid", params, widgetSet);
+    app.put("/widget/:type/:objectid/:id", params, widgetSet);
     app.delete("/widget/:type/:objectid/:id", params, widgetDel);
-    app.post("/widget/:type/:objectid/:id?", params, widgetSet);
     app.put("/file-edit/:id", params, fileEdit);
-    app.get("/widget/:type/:objectid", params, widgetGet);
 }

package/dist/server/routes/widget/services/widget.entity.del.d.ts

@@ -0,0 +1,26 @@
+/**
+ *
+ * @method DELETE
+ * @summary CRM дані для обраного віджета.
+ * @priority 2
+ * @tag table
+ * @type api
+ * @param {String} id Ідентифікатор child рядка (файлу, зображення, коментаря тощо)
+ * @param {Any} objectid ID parent рядка в БД, primary key
+ * @param {Any} entityType Сутність / таблиця, для збереження унікальності при використанні objectid default serial
+ * @param {String} type Тип віджету
+ * @errors 400, 500
+ * @returns {Number} status Номер помилки
+ * @returns {String|Object} error Опис помилки
+ * @returns {String|Object} message Повідомлення про успішне виконання або об'єкт з параметрами
+ */
+export default function widgetEntityDel({ type, entityType, objectid, id, uid, userName }: any, pg?: any): Promise<{
+    data: {
+        id: any;
+    };
+    user: {
+        uid: any;
+        name: any;
+    };
+}>;
+//# sourceMappingURL=widget.entity.del.d.ts.map

package/dist/server/routes/widget/services/widget.entity.del.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.entity.del.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/services/widget.entity.del.ts"],"names":[],"mappings":"AAiCA;;;;;;;;;;;;;;;GAeG;AAEH,wBAA8B,eAAe,CAC3C,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EACtD,EAAE,MAAmB;;;;;;;;GAwEtB"}

package/dist/server/routes/widget/services/widget.entity.del.js

@@ -0,0 +1,79 @@
+import config from "../../../../config.js";
+import isFileExists from "../../../plugins/file/isFileExists.js";
+import logChanges from "../../../plugins/crud/funcs/utils/logChanges.js";
+import pgClients from "../../../plugins/pg/pgClients.js";
+import { BadRequestError, ForbiddenError, UnauthorizedError, } from "../../../../errors.js";
+const isAdmin = () => process.env.NODE_ENV === "admin" || config.admin;
+async function checkAccess({ pg, objectid, entityType, id, }) {
+    const { uid, filepath } = await pg
+        .query("select uid, file_path as filepath from crm.files where entity_id=$1 and entity_type=$2 and entity_type=$2 and file_id=$3", [objectid, entityType, id])
+        .then((el) => el.rows?.[0] || {});
+    return { uid, exists: filepath ? await isFileExists(filepath) : null };
+}
+/**
+ *
+ * @method DELETE
+ * @summary CRM дані для обраного віджета.
+ * @priority 2
+ * @tag table
+ * @type api
+ * @param {String} id Ідентифікатор child рядка (файлу, зображення, коментаря тощо)
+ * @param {Any} objectid ID parent рядка в БД, primary key
+ * @param {Any} entityType Сутність / таблиця, для збереження унікальності при використанні objectid default serial
+ * @param {String} type Тип віджету
+ * @errors 400, 500
+ * @returns {Number} status Номер помилки
+ * @returns {String|Object} error Опис помилки
+ * @returns {String|Object} message Повідомлення про успішне виконання або об'єкт з параметрами
+ */
+export default async function widgetEntityDel({ type, entityType, objectid, id, uid, userName }, pg = pgClients.client) {
+    if (!uid) {
+        throw UnauthorizedError("unauthorized");
+    }
+    if (!entityType) {
+        throw BadRequestError("not enough params: entity type");
+    }
+    if (!objectid) {
+        throw BadRequestError("not enough params: object id");
+    }
+    if (!id && type !== "reaction") {
+        throw BadRequestError("not enough params: id");
+    }
+    // force delete db entry if file not exists
+    const { exists, uid: author } = ["file", "gallery"].includes(type)
+        ? await checkAccess({ pg, objectid, entityType, id })
+        : {};
+    if (exists && !isAdmin() && uid && author !== uid) {
+        throw ForbiddenError("access restricted: file exists, not an author");
+    }
+    const sqls = {
+        comment: `delete from crm.communications where entity_id=$1 and entity_type=$2 and ${isAdmin() ? "$3=$3" : "uid=$3"} and communication_id=$4`,
+        checklist: `delete from crm.checklists where entity_id=$1 and entity_type=$2 and ${isAdmin() ? "$3=$3" : "uid=$3"} and checklist_id=$4`,
+        file: `update crm.files set file_status=3 where entity_id=$1 and entity_type=$2 and ${!exists || isAdmin() ? "$3=$3" : "uid=$3"} and file_id=$4 returning uploaded_name`,
+        gallery: `update crm.files set file_status=3 where entity_id=$1 and entity_type=$2 and ${!exists || isAdmin() ? "$3=$3" : "uid=$3"} and file_id=$4 returning uploaded_name`,
+        reaction: `delete from crm.reactions where entity_id=$1 and entity_type=$2 and ${isAdmin() ? "$3=$3" : "created_by=$3"} and $3=$3 and reaction_id=$4 returning reaction_type`,
+    };
+    const q = sqls[type];
+    const table = {
+        comment: "crm.communications",
+        checklist: "crm.checklists",
+        file: "crm.files",
+        gallery: "crm.files",
+        reaction: "crm.reactions",
+    }[type];
+    if (!q || !table) {
+        throw BadRequestError("invalid widget type");
+    }
+    const rows = await pg
+        .query(q, [objectid, entityType, uid, id || ""])
+        .then((r) => r.rows || []);
+    await logChanges({
+        pg,
+        table,
+        id: type === "reaction" ? objectid : id,
+        data: rows[0],
+        uid,
+        type: "DELETE",
+    });
+    return { data: { id }, user: { uid, name: userName } };
+}

package/dist/server/routes/widget/services/widget.entity.get.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @method GET
+ * @type api
+ * @param {Any} objectid ID parent рядка в БД, primary key
+ * @param {Any} entityType Сутність / таблиця, для збереження унікальності при використанні objectid default serial
+ * @param {String} type Тип віджету
+ */
+export default function widgetEntityGet({ type, entityType, objectid, uid, userName, debug }: any, pg?: any): Promise<{
+    q: string;
+    type: any;
+    q1: string;
+    id: any;
+    data: any;
+    time?: undefined;
+    rows?: undefined;
+    user?: undefined;
+    objectid?: undefined;
+} | {
+    time: {
+        rows: number;
+        data: number;
+    };
+    rows: any;
+    user: {
+        uid: any;
+        name: any;
+    };
+    data: {
+        author: any;
+        cdate: any;
+        edate: any;
+    };
+    objectid: any;
+    q?: undefined;
+    type?: undefined;
+    q1?: undefined;
+    id?: undefined;
+}>;
+//# sourceMappingURL=widget.entity.get.d.ts.map

package/dist/server/routes/widget/services/widget.entity.get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.entity.get.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/services/widget.entity.get.ts"],"names":[],"mappings":"AAyBA;;;;;;GAMG;AAEH,wBAA8B,eAAe,CAC3C,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,EACzD,EAAE,MAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyKtB"}

package/dist/server/routes/widget/services/widget.entity.get.js

@@ -0,0 +1,148 @@
+import getMeta from "../../../plugins/pg/funcs/getMeta.js";
+import pgClients from "../../../plugins/pg/pgClients.js";
+import { BadRequestError, NotFoundError } from "../../../../errors.js";
+const galleryExtList = [
+    "png",
+    "svg",
+    "jpg",
+    "jpeg",
+    "gif",
+    "mp4",
+    "mov",
+    "avi",
+];
+const username = "coalesce(u.sur_name,'')||coalesce(' '||u.user_name,'') ||coalesce(' '||u.father_name,'')";
+const pkList = {
+    comment: "communication_id",
+    checklist: "checklist_id",
+    file: "file_id",
+    gallery: "file_id",
+    reaction: "reaction_id",
+};
+/**
+ * @method GET
+ * @type api
+ * @param {Any} objectid ID parent рядка в БД, primary key
+ * @param {Any} entityType Сутність / таблиця, для збереження унікальності при використанні objectid default serial
+ * @param {String} type Тип віджету
+ */
+export default async function widgetEntityGet({ type, entityType, objectid, uid, userName, debug }, pg = pgClients.client) {
+    const time = [Date.now()];
+    if (!entityType) {
+        throw BadRequestError("not enough params: entity type");
+    }
+    if (!objectid) {
+        throw BadRequestError("not enough params: id");
+    }
+    const sqls = {
+        comment: pg.pk["admin.users"]
+            ? `select communication_id, entity_id, body, subject, c.cdate, c.uid, 
+    ${username} as username, u.login, u.avatar
+    from crm.communications c
+    left join admin.users u on u.uid=c.uid 
+    where entity_id=$1 and entity_type=$2 order by cdate desc`
+            : "select communication_id, entity_id, body, subject, cdate, uid from crm.communications where entity_id=$1 and entity_type=$2 order by cdate desc",
+        history: `SELECT change_id, entity_id, entity_type, change_type, change_date, a.change_user_id, a.uid, a.cdate, b.json_agg as changes,
+      ${username} as username, u.login, u.avatar
+      FROM log.table_changes a
+      left join admin.users u on a.change_user_id = u.uid
+      left join lateral(
+        select json_agg(row_to_json(q)) from (
+          select change_data_id, entity_key, value_new, value_old from log.table_changes_data
+          where change_id=a.change_id
+        )q
+      )b on 1=1
+      where a.change_type != 'INSERT' and b.json_agg is not null and ((entity_id=$1 and entity_type=$2) or entity_id in (
+        select communication_id from crm.communications where entity_id=$1 and entity_type=$2
+        union all select checklist_id from crm.checklists where entity_id=$1 and entity_type=$2
+        union all select file_id from crm.files where entity_id=$1 and entity_type=$2) 
+      )
+      order by cdate desc limit 100`,
+        checklist: pg.pk["admin.users"]
+            ? `SELECT checklist_id, entity_id, subject, is_done, done_date, c.uid, c.cdate, ${username} as username, u.login, u.avatar
+      FROM crm.checklists c
+      left join admin.users u on u.uid=c.uid
+      where entity_id=$1 and entity_type=$2 order by cdate desc`
+            : "SELECT checklist_id, entity_id, subject, is_done, done_date, uid, cdate FROM crm.checklists where entity_id=$1 and entity_type=$2 order by cdate desc",
+        file: pg.pk["admin.users"]
+            ? `SELECT file_id, entity_id, entity_type, file_path, uploaded_name, ext, size, c.uid, c.cdate, file_type, c.ismain, 
+    ${username} as username, u.login, isverified, u.avatar, u.uid as author, file_status 
+    FROM crm.files c 
+    left join admin.users u on u.uid=c.uid
+    where entity_id=$1 and entity_type=$2 and file_status<>3 order by cdate desc`
+            : `SELECT file_id, entity_id, entity_type, file_path, uploaded_name, ext, size, uid, cdate, file_type, ismain,
+      isverified, uid as author, file_status FROM crm.files c where entity_id=$1 and entity_type=$2 and file_status<>3 order by cdate desc`,
+        gallery: pg.pk["admin.users"]
+            ? `SELECT file_id, entity_id, entity_type, file_path, uploaded_name, ext, size, c.uid, c.cdate, file_type, c.ismain,
+    ${username} as username, u.login, u.avatar, isverified, u.avatar, c.uid as author, file_status 
+    FROM crm.files c 
+    left join admin.users u on u.uid=c.uid
+    where entity_id=$1 and entity_type=$2 and file_status<>3 and ext = any($3) order by cdate desc`
+            : `SELECT file_id, entity_id, entity_type, file_path, uploaded_name, ext, size, c.uid, c.cdate, file_type, ismain,
+      isverified, uid as author, file_status FROM crm.files c where entity_id=$1 and entity_type=$2 and file_status<>3 and ext = any($3) order by cdate desc`,
+        reaction: "SELECT count(*), reaction_type FROM crm.reactions c where entity_id=$1 and entity_type=$2 group by reaction_type",
+    };
+    const q = sqls[type];
+    if (!q) {
+        throw BadRequestError("invalid widget type");
+    }
+    /* rows */
+    const rows = await pg
+        .query(q, [objectid, entityType, type === "gallery" ? galleryExtList : null].filter(Boolean))
+        .then((el) => el.rows || []);
+    time.push(Date.now());
+    rows.forEach((row) => Object.assign(row, { username: row.username?.trim?.() || row.login }));
+    /* reactions */
+    const widgetPkey = pkList[type];
+    if (type === "comment" && widgetPkey) {
+        const reactions = rows.length && uid
+            ? await pg
+                .query("select json_object_agg(entity_id, reaction_type) from crm.reactions where entity_id=any($1) and entity_type=$2 and created_by=$3", [rows.map((row) => row[widgetPkey]), entityType, uid])
+                .then((el) => el.rows?.[0]?.json_object_agg || {})
+            : {};
+        rows
+            .filter((row) => reactions[row[widgetPkey]])
+            .forEach((row) => {
+            Object.assign(row, { reaction: reactions[row[widgetPkey]] });
+        });
+    }
+    /* Object info  */
+    const { pk, columns = [] } = await getMeta({ pg, table: entityType });
+    const authorIdColumn = columns.find((col) => ["uid", "created_by"].includes(col.name))?.name;
+    if (!pk &&
+        type === "history" &&
+        process.env.NODE_ENV !== "test" &&
+        !process.env.VITEST) {
+        throw NotFoundError("log table not found");
+    }
+    const cdateColumn = columns.find((col) => ["cdate", "created_at"].includes(col.name))?.name;
+    const editorDateColumn = columns.find((col) => ["editor_date", "updated_at"].includes(col.name))?.name;
+    const q1 = `select ${username} as author, u.login ${cdateColumn ? `,a.${cdateColumn} as cdate` : ""} ${editorDateColumn ? `,a.${editorDateColumn} as editor_date` : ""} from ${entityType} a 
+  left join admin.users u on a.${authorIdColumn}=u.uid where a.${pk}=$1 limit 1`;
+    const data = pg.pk["admin.users"] && pk && entityType
+        ? await pg
+            .query(q1, [objectid, type === "gallery" ? galleryExtList : null].filter(Boolean))
+            .then((el) => el.rows?.[0] || {})
+        : {};
+    time.push(Date.now());
+    if (debug) {
+        return {
+            q,
+            type,
+            q1,
+            id: objectid,
+            data,
+        };
+    }
+    return {
+        time: { rows: time[1] - time[0], data: time[2] - time[1] },
+        rows,
+        user: { uid, name: userName },
+        data: {
+            author: data?.author,
+            cdate: data?.cdate,
+            edate: data?.editor_date,
+        },
+        objectid,
+    };
+}

package/dist/server/routes/widget/services/widget.entity.set.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @method POST|PUT
+ * @type api
+ * @param {String} id Ідентифікатор child рядка (файлу, зображення, коментаря тощо)
+ * @param {Any} objectid ID parent рядка в БД, primary key
+ * @param {Any} entityType Сутність / таблиця, для збереження унікальності при використанні objectid default serial
+ * @param {String} type Тип віджету
+ */
+export default function widgetEntitySet({ type, entityType, objectid, id, uid, reqPath, file, body }: any, pg?: any): Promise<{
+    rowCount: number;
+    data: string;
+    command: string;
+    id: any;
+    entity_id: any;
+} | {
+    rowCount: any;
+    data: string;
+    command: any;
+    id: any;
+    entity_id?: undefined;
+}>;
+//# sourceMappingURL=widget.entity.set.d.ts.map

package/dist/server/routes/widget/services/widget.entity.set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widget.entity.set.d.ts","sourceRoot":"","sources":["../../../../../server/routes/widget/services/widget.entity.set.ts"],"names":[],"mappings":"AAoCA;;;;;;;GAOG;AAEH,wBAA8B,eAAe,CAC3C,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EACjE,EAAE,MAAmB;;;;;;;;;;;;GAiHtB"}

package/dist/server/routes/widget/services/widget.entity.set.js

@@ -0,0 +1,131 @@
+import path from "node:path";
+import pgClients from "../../../plugins/pg/pgClients.js";
+import getMeta from "../../../plugins/pg/funcs/getMeta.js";
+import dataInsert from "../../../plugins/crud/funcs/dataInsert.js";
+import dataUpdate from "../../../plugins/crud/funcs/dataUpdate.js";
+import { applyHook } from "../../../../utils.js";
+import { BadRequestError, NotFoundError } from "../../../../errors.js";
+const tableList = {
+    comment: "crm.communications",
+    gallery: "crm.files",
+    file: "crm.files",
+    checklist: "crm.checklists",
+    reaction: "crm.reactions",
+};
+const pkList = {
+    comment: "communication_id",
+    checklist: "checklist_id",
+    file: "file_id",
+    gallery: "file_id",
+    reaction: "reaction_id",
+};
+const galleryExtList = [
+    "png",
+    "svg",
+    "jpg",
+    "jpeg",
+    "gif",
+    "mp4",
+    "mov",
+    "avi",
+];
+/**
+ * @method POST|PUT
+ * @type api
+ * @param {String} id Ідентифікатор child рядка (файлу, зображення, коментаря тощо)
+ * @param {Any} objectid ID parent рядка в БД, primary key
+ * @param {Any} entityType Сутність / таблиця, для збереження унікальності при використанні objectid default serial
+ * @param {String} type Тип віджету
+ */
+export default async function widgetEntitySet({ type, entityType, objectid, id, uid, reqPath, file, body }, pg = pgClients.client) {
+    if (!pkList[type] || !tableList[type]) {
+        throw BadRequestError("param type not valid");
+    }
+    if (!entityType) {
+        throw BadRequestError("not enough params: entity type");
+    }
+    if (!objectid) {
+        throw BadRequestError("not enough params: id");
+    }
+    const table = tableList[type];
+    if (file) {
+        const extName = path
+            .extname(file.filepath || "")
+            .slice(1)
+            .toLowerCase();
+        const data = {
+            uploaded_name: file?.originalFilename
+                ?.toLocaleLowerCase()
+                ?.replace(/'/g, "''"),
+            file_path: file?.relativeFilepath?.replace(/\\/g, "/"),
+            ext: extName,
+            size: file?.size,
+            file_status: 1,
+            uid: uid || 1,
+            entity_id: objectid,
+            entity_type: entityType,
+        };
+        if (type === "gallery" && !galleryExtList.includes(extName.toLowerCase())) {
+            throw BadRequestError("invalid file extension");
+        }
+        const row = await dataInsert({
+            pg,
+            table: "crm.files",
+            data,
+            uid,
+        }).then((r) => r.rows?.[0]);
+        if (type === "gallery") {
+            await pg.query(`update crm.files set ismain=true 
+      where entity_id=$1 and entity_type=$2
+      and file_id=$3
+      and (select count(*) = 0 from crm.files where entity_id=$1 and entity_type=$2 and ismain)`, [objectid, entityType, row?.file_id]);
+        }
+        return {
+            rowCount: 1,
+            data: "ok",
+            command: "UPLOAD",
+            id: row?.file_id,
+            entity_id: row?.entity_id,
+        };
+    }
+    const { pk } = await getMeta({ pg, table });
+    if (!pk) {
+        throw NotFoundError("table not found");
+    }
+    const data = { ...body, uid, entity_id: objectid, entity_type: entityType };
+    await applyHook("onWidgetSet", {
+        pg,
+        link: reqPath,
+        id,
+        objectid,
+        entityType,
+        user: { uid },
+        type,
+        payload: data,
+    });
+    const result = id
+        ? await dataUpdate({
+            pg,
+            table,
+            data,
+            id,
+            uid,
+        })
+        : await dataInsert({
+            pg,
+            table,
+            data,
+            uid,
+        });
+    // put w/ out file
+    if (type === "gallery" && body?.ismain && id) {
+        await pg.query(`update crm.files set ismain=false 
+      where entity_id=$1 and entity_type=$2 and file_id<>$3`, [objectid, entityType, id]);
+    }
+    return {
+        rowCount: result.rowCount,
+        data: "ok",
+        command: result.command,
+        id: result.rows?.[0]?.[pkList[type]] || result?.[pkList[type]],
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengis/fastify-table",
-  "version": "2.4.4",
+  "version": "2.4.6",
   "type": "module",
   "description": "core-plugins",
   "keywords": [