skywriter 1.0.0

package/dist/operations/signup.js

@@ -0,0 +1,45 @@
+import bcrypt from 'bcrypt';
+const SALT_ROUNDS = 10;
+/**
+ * Create a new user account
+ * @param client Database client
+ * @param params Signup parameters
+ * @returns The created user (without password hash)
+ * @throws Error if username already exists or validation fails
+ */
+export const signup = async (client, params) => {
+    const { username, password, password_confirm } = params;
+    // Validate password confirmation if provided
+    if (password_confirm !== undefined && password !== password_confirm) {
+        throw new Error('Passwords do not match');
+    }
+    // Validate input
+    if (!username || username.trim().length === 0) {
+        throw new Error('Username is required');
+    }
+    if (username.length < 3) {
+        throw new Error('Username must be at least 3 characters long');
+    }
+    if (username.length > 255) {
+        throw new Error('Username must not exceed 255 characters');
+    }
+    if (!password || password.length === 0) {
+        throw new Error('Password is required');
+    }
+    if (password.length < 8) {
+        throw new Error('Password must be at least 8 characters long');
+    }
+    // Check if username already exists
+    const existingUser = await client.query('SELECT id FROM users WHERE username = $1', [username.trim()]);
+    if (existingUser.rows.length > 0) {
+        throw new Error('Username already exists');
+    }
+    // Hash the password
+    const passwordHash = await bcrypt.hash(password, SALT_ROUNDS);
+    // Insert the new user
+    const result = await client.query(`INSERT INTO users (username, password_hash) 
+     VALUES ($1, $2) 
+     RETURNING id, username, created_at`, [username.trim(), passwordHash]);
+    return result.rows[0];
+};
+//# sourceMappingURL=signup.js.map

package/dist/operations/signup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signup.js","sourceRoot":"","sources":["../../src/operations/signup.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,MAAM,WAAW,GAAG,EAAE,CAAA;AActB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAA8C,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;IACxF,MAAM,EAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAC,GAAG,MAAM,CAAA;IAErD,6CAA6C;IAC7C,IAAI,gBAAgB,KAAK,SAAS,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC3C,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzC,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzC,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAChE,CAAC;IAED,mCAAmC;IACnC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtG,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,CAAC;IAED,oBAAoB;IACpB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;IAE7D,sBAAsB;IACtB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B;;wCAEoC,EACpC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAChC,CAAA;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACvB,CAAC,CAAA"}

package/dist/operations/types.d.ts

@@ -0,0 +1,223 @@
+import type { PoolClient } from 'pg';
+/**
+ * Generic type for database operations
+ * All database operations follow this pattern: (client: PoolClient, ...args) => Promise<Result>
+ */
+export type DbOperation<Args extends unknown[] = [], Result = unknown> = (client: PoolClient, ...args: Args) => Promise<Result>;
+export interface Document {
+    id: DocumentId;
+    path_id: RouteId;
+    current_record_id: number | null;
+    draft_record_id: number | null;
+    published: boolean;
+    created_at: Date;
+    updated_at: Date;
+}
+export interface DocumentRecord {
+    id: number;
+    title: string;
+    content: string;
+    data: string;
+    style: string;
+    script: string;
+    server: string;
+    template_id: number | null;
+    slot_id: number | null;
+    content_type: string;
+    data_type: string | null;
+    has_eta: boolean;
+    mime_type: string;
+    extension: string;
+    created_at: Date;
+    updated_at: Date;
+}
+export interface Route {
+    id: RouteId;
+    path: string;
+    document_id: DocumentId;
+    created_at: Date;
+}
+export interface Upload {
+    id: UploadId;
+    filename: string;
+    document_id: DocumentId | null;
+    created_at: Date;
+    original_filename: string;
+    hidden: boolean;
+    hash: string;
+}
+export interface UploadsManyQuery {
+    sortBy?: 'created_at' | 'original_filename' | 'filename';
+    sortOrder?: 'asc' | 'desc';
+    limit?: number;
+    offset?: number;
+    startsWithPath?: string;
+}
+export interface GetOptions {
+    /** Include draft version in response (if exists) */
+    draft?: boolean;
+    /** Filter by published status: true = published only, false = unpublished only, undefined = both (no filter) */
+    published?: boolean;
+}
+/**
+ * Comprehensive document query type
+ * Accepts multiple input formats:
+ * - string (path)
+ * - {path: string} (path object)
+ * - {path?: string} (optional path object, for combined with EditDocumentInput)
+ * - number (document id)
+ * - {id: number} (id object)
+ * - {id?: number} (optional id object, for combined with EditDocumentInput)
+ * - DualDocument (extracts id)
+ * - Route (extracts document_id)
+ *
+ * The {id?: DocumentId, path?: string} object form is used for upsert operations
+ * when combined with EditDocumentInput.
+ */
+export type DocumentQuery = string | {
+    path?: string;
+} | DocumentId | {
+    id?: DocumentId;
+} | DualDocument | Route;
+/**
+ * Redirect query type for identifying a redirect route
+ * Accepts:
+ * - number (redirect/route id)
+ * - string (redirect path)
+ * - {id: number} (redirect/route id object)
+ * - {path: string} (redirect path object)
+ */
+export type RedirectQuery = RouteId | string | {
+    id: RouteId;
+} | {
+    path: string;
+};
+export interface EditDocumentInput {
+    path?: string;
+    title?: string;
+    content?: string | null;
+    data?: string | null;
+    style?: string | null;
+    script?: string | null;
+    server?: string | null;
+    template_id?: DocumentId | null;
+    slot_id?: DocumentId | null;
+    content_type?: string | null;
+    data_type?: string | null;
+    has_eta?: boolean;
+    mime_type?: string;
+    extension?: string;
+    published?: boolean;
+    draft?: boolean;
+}
+export interface DocumentInstance {
+    id: DocumentId;
+    path: string;
+    title: string;
+    content: string;
+    data: string;
+    style: string;
+    script: string;
+    server: string;
+    template_id: DocumentId | null;
+    slot_id: DocumentId | null;
+    content_type: string;
+    data_type: string | null;
+    has_eta: boolean;
+    mime_type: string;
+    extension: string;
+    published: boolean;
+    created_at: Date;
+    updated_at: Date;
+}
+interface DocumentCore {
+    id: DocumentId;
+    path: string;
+    redirect?: boolean;
+    published: boolean;
+}
+export interface DualDocument extends DocumentCore {
+    current?: DocumentInstance;
+    draft?: DocumentInstance;
+}
+export type RenderDocumentParts = {
+    document: DualDocument;
+    redirects?: Route[];
+    uploads?: Upload[];
+};
+export type RenderDocument = DocumentCore & DocumentInstance & {
+    redirects?: Route[];
+    uploads?: Upload[];
+    draft: boolean;
+    slot?: RenderDocument;
+    template?: RenderDocument;
+};
+declare const __brand: unique symbol;
+type Branded<T, B> = T & {
+    [__brand]: B;
+};
+export type DocumentId = Branded<number, 'DocumentId'>;
+type RouteId = Branded<number, 'RouteId'>;
+export type UploadId = Branded<number, 'UploadId'>;
+export interface DocumentManyQuery {
+    sortBy?: 'created_at' | 'updated_at' | 'title' | 'path';
+    sortOrder?: 'asc' | 'desc';
+    published?: boolean;
+    draft?: boolean;
+    limit?: number;
+    offset?: number;
+    startsWithPath?: string;
+}
+export interface SearchOptions {
+    /** Search query string (case-insensitive LIKE pattern match on path and title) */
+    query: string;
+    /** Maximum number of results (default: 10) */
+    limit?: number;
+    /** Filter by published status: true = only published, false = only unpublished, undefined = both */
+    published?: boolean;
+}
+export interface SearchResult extends DocumentCore {
+    /** Current document title */
+    title: string;
+}
+/**
+ * Result of saving a downloaded image as an upload
+ */
+export interface SavedUpload {
+    /** The original foreign image info */
+    original: {
+        url: string;
+        match: string;
+        type: 'html' | 'markdown';
+        alt?: string;
+    };
+    /** The new local URL to use */
+    localUrl: string;
+    /** The upload's original_filename */
+    originalFilename: string;
+}
+interface RenderDocumentOptions {
+    /** Include redirects in response (default: true) */
+    includeRedirects?: boolean;
+    /** Include uploads in response (default: true) */
+    includeUploads?: boolean;
+    /** Include hidden uploads in response (default: false) */
+    includeHiddenUploads?: boolean;
+    /** Include slot document (default: false) */
+    includeSlot?: boolean;
+    /** Include template document (default: false) */
+    includeTemplate?: boolean;
+}
+export interface RenderDocumentGetOptions extends GetOptions, RenderDocumentOptions {
+}
+export interface RenderDocumentsManyQuery extends DocumentManyQuery, RenderDocumentOptions {
+}
+/**
+ * Factory function type for creating function context
+ * Used by getPage/getPages to pass context to the render function
+ */
+export type FunctionContext = (client: import('pg').PoolClient, doc: RenderDocument | {
+    path: string;
+}, requestQuery?: Record<string, string>) => Record<string, unknown>;
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/operations/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/operations/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,IAAI,CAAA;AAElC;;;GAGG;AACH,MAAM,MAAM,WAAW,CAAC,IAAI,SAAS,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,GAAG,OAAO,IAAI,CACvE,MAAM,EAAE,UAAU,EAClB,GAAG,IAAI,EAAE,IAAI,KACV,OAAO,CAAC,MAAM,CAAC,CAAA;AAEpB,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,UAAU,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,IAAI,CAAA;IAChB,UAAU,EAAE,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,IAAI,CAAA;IAChB,UAAU,EAAE,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,OAAO,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,UAAU,CAAA;IACvB,UAAU,EAAE,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,QAAQ,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,IAAI,CAAA;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,YAAY,GAAG,mBAAmB,GAAG,UAAU,CAAA;IACxD,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,gHAAgH;IAChH,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAC,GAAG,UAAU,GAAG;IAAC,EAAE,CAAC,EAAE,UAAU,CAAA;CAAC,GAAG,YAAY,GAAG,KAAK,CAAA;AAE5G;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG;IAAC,EAAE,EAAE,OAAO,CAAA;CAAC,GAAG;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,CAAA;AAE7E,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,WAAW,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/B,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,UAAU,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9B,OAAO,EAAE,UAAU,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,IAAI,CAAA;IAChB,UAAU,EAAE,IAAI,CAAA;CACjB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,UAAU,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,KAAK,CAAC,EAAE,gBAAgB,CAAA;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,YAAY,CAAA;IACtB,SAAS,CAAC,EAAE,KAAK,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GACvC,gBAAgB,GAAG;IACjB,SAAS,CAAC,EAAE,KAAK,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,IAAI,CAAC,EAAE,cAAc,CAAA;IACrB,QAAQ,CAAC,EAAE,cAAc,CAAA;CAC1B,CAAA;AAEH,OAAO,CAAC,MAAM,OAAO,EAAE,OAAO,MAAM,CAAA;AAEpC,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG;IAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;CAAC,CAAA;AAEvC,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AACtD,KAAK,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACzC,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAElD,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAA;IACvD,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAA;IACb,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oGAAoG;IACpG,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,sCAAsC;IACtC,QAAQ,EAAE;QACR,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;QACzB,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;IACD,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAA;IAChB,qCAAqC;IACrC,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,UAAU,qBAAqB;IAC7B,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,0DAA0D;IAC1D,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,6CAA6C;IAC7C,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,iDAAiD;IACjD,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,wBAAyB,SAAQ,UAAU,EAAE,qBAAqB;CAAG;AAEtF,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB,EAAE,qBAAqB;CAAG;AAE7F;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,MAAM,EAAE,OAAO,IAAI,EAAE,UAAU,EAC/B,GAAG,EAAE,cAAc,GAAG;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,EACpC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA"}

package/dist/operations/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/operations/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/operations/types.ts"],"names":[],"mappings":""}

package/dist/operations/updateUpload.d.ts

@@ -0,0 +1,27 @@
+import type { Upload, DbOperation, UploadId } from './types.ts';
+/**
+ * Input for updating an upload
+ */
+interface UpdateUploadInput {
+    /** New filename for the upload */
+    original_filename?: string;
+    /** Whether the upload is hidden */
+    hidden?: boolean;
+}
+/**
+ * Updates an upload's original_filename and/or hidden status.
+ *
+ * When renaming or unhiding causes a filename collision with an existing visible upload:
+ * - The existing visible upload gets renamed with an incremented suffix
+ * - The existing visible upload is marked as hidden
+ * - The target upload takes the desired filename and visibility
+ *
+ * @param client Database client
+ * @param uploadId The ID of the upload to update
+ * @param input The fields to update (original_filename and/or hidden)
+ * @returns The updated Upload object
+ * @throws Error if upload doesn't exist
+ */
+export declare const updateUpload: DbOperation<[UploadId, UpdateUploadInput], Upload>;
+export {};
+//# sourceMappingURL=updateUpload.d.ts.map

package/dist/operations/updateUpload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUpload.d.ts","sourceRoot":"","sources":["../../src/operations/updateUpload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAa,MAAM,YAAY,CAAA;AAIzE;;GAEG;AACH,UAAU,iBAAiB;IACzB,kCAAkC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,mCAAmC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAoF3E,CAAA"}

package/dist/operations/updateUpload.js

@@ -0,0 +1,78 @@
+import { getAllUploadsForDocument } from "./getAllUploadsForDocument.js";
+import { generateUniqueFilename } from "./utils/generateUniqueFilename.js";
+/**
+ * Updates an upload's original_filename and/or hidden status.
+ *
+ * When renaming or unhiding causes a filename collision with an existing visible upload:
+ * - The existing visible upload gets renamed with an incremented suffix
+ * - The existing visible upload is marked as hidden
+ * - The target upload takes the desired filename and visibility
+ *
+ * @param client Database client
+ * @param uploadId The ID of the upload to update
+ * @param input The fields to update (original_filename and/or hidden)
+ * @returns The updated Upload object
+ * @throws Error if upload doesn't exist
+ */
+export const updateUpload = async (client, uploadId, input) => {
+    const { original_filename: newFilename, hidden: newHidden } = input;
+    // Nothing to update
+    if (newFilename === undefined && newHidden === undefined) {
+        const result = await client.query(`SELECT id, filename, document_id, created_at, original_filename, hidden
+       FROM uploads WHERE id = $1`, [uploadId]);
+        if (result.rows.length === 0) {
+            throw new Error('Upload does not exist');
+        }
+        return result.rows[0];
+    }
+    try {
+        await client.query('BEGIN');
+        // Get the current upload
+        const currentResult = await client.query(`SELECT id, filename, document_id, created_at, original_filename, hidden
+       FROM uploads WHERE id = $1 FOR UPDATE`, [uploadId]);
+        if (currentResult.rows.length === 0) {
+            throw new Error('Upload does not exist');
+        }
+        const currentUpload = currentResult.rows[0];
+        const documentId = currentUpload.document_id;
+        // Determine the target state
+        const targetFilename = newFilename ?? currentUpload.original_filename;
+        const targetHidden = newHidden ?? currentUpload.hidden;
+        // Check if we need to handle a collision
+        // A collision occurs when:
+        // 1. The target filename is different from current OR we're unhiding
+        // 2. The target will be visible (not hidden)
+        // 3. There's already a visible upload with that filename (other than this one)
+        const willBeVisible = !targetHidden;
+        const filenameChanging = targetFilename !== currentUpload.original_filename;
+        const visibilityChanging = targetHidden !== currentUpload.hidden;
+        if (willBeVisible && (filenameChanging || visibilityChanging)) {
+            // Get all uploads for collision checking
+            const allUploads = await getAllUploadsForDocument(client, documentId);
+            const existingFilenames = allUploads.map(u => u.original_filename);
+            // Find any existing visible upload with the target filename (excluding this upload)
+            const collidingUpload = allUploads.find(u => u.original_filename === targetFilename && !u.hidden && u.id !== uploadId);
+            if (collidingUpload) {
+                // Generate a new unique filename for the displaced upload
+                const displacedFilename = generateUniqueFilename(targetFilename, existingFilenames);
+                // Mark the colliding upload as hidden and rename it
+                await client.query(`UPDATE uploads SET original_filename = $1, hidden = true WHERE id = $2`, [
+                    displacedFilename,
+                    collidingUpload.id,
+                ]);
+            }
+        }
+        // Update the target upload
+        const updateResult = await client.query(`UPDATE uploads 
+       SET original_filename = $1, hidden = $2
+       WHERE id = $3
+       RETURNING id, filename, document_id, created_at, original_filename, hidden`, [targetFilename, targetHidden, uploadId]);
+        await client.query('COMMIT');
+        return updateResult.rows[0];
+    }
+    catch (error) {
+        await client.query('ROLLBACK');
+        throw error;
+    }
+};
+//# sourceMappingURL=updateUpload.js.map

package/dist/operations/updateUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateUpload.js","sourceRoot":"","sources":["../../src/operations/updateUpload.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,wBAAwB,EAAC,MAAM,+BAA+B,CAAA;AACtE,OAAO,EAAC,sBAAsB,EAAC,MAAM,mCAAmC,CAAA;AAYxE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,YAAY,GAAuD,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;IAChH,MAAM,EAAC,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAC,GAAG,KAAK,CAAA;IAEjE,oBAAoB;IACpB,IAAI,WAAW,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B;kCAC4B,EAC5B,CAAC,QAAQ,CAAC,CACX,CAAA;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAE3B,yBAAyB;QACzB,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,KAAK,CACtC;6CACuC,EACvC,CAAC,QAAQ,CAAC,CACX,CAAA;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,WAAyB,CAAA;QAE1D,6BAA6B;QAC7B,MAAM,cAAc,GAAG,WAAW,IAAI,aAAa,CAAC,iBAAiB,CAAA;QACrE,MAAM,YAAY,GAAG,SAAS,IAAI,aAAa,CAAC,MAAM,CAAA;QAEtD,yCAAyC;QACzC,2BAA2B;QAC3B,qEAAqE;QACrE,6CAA6C;QAC7C,+EAA+E;QAC/E,MAAM,aAAa,GAAG,CAAC,YAAY,CAAA;QACnC,MAAM,gBAAgB,GAAG,cAAc,KAAK,aAAa,CAAC,iBAAiB,CAAA;QAC3E,MAAM,kBAAkB,GAAG,YAAY,KAAK,aAAa,CAAC,MAAM,CAAA;QAEhE,IAAI,aAAa,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,EAAE,CAAC;YAC9D,yCAAyC;YACzC,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;YACrE,MAAM,iBAAiB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;YAElE,oFAAoF;YACpF,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,cAAc,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,CAC9E,CAAA;YAED,IAAI,eAAe,EAAE,CAAC;gBACpB,0DAA0D;gBAC1D,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;gBAEnF,oDAAoD;gBACpD,MAAM,MAAM,CAAC,KAAK,CAAC,wEAAwE,EAAE;oBAC3F,iBAAiB;oBACjB,eAAe,CAAC,EAAE;iBACnB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CACrC;;;kFAG4E,EAC5E,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CACzC,CAAA;QAED,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAE5B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA"}

package/dist/operations/updateViaArchive.d.ts

@@ -0,0 +1,23 @@
+import type { DocumentQuery, DbOperation } from './types.ts';
+import { Readable } from 'stream';
+/**
+ * Update a document from a tar.gz archive
+ * Validates that the archive contains the expected files and no unexpected files
+ *
+ * Expected files:
+ * - settings.json (base document, required)
+ * - content.* (any extension, optional, but only one file) OR index.html (optional, mutually exclusive with content.*)
+ * - data.* (any extension, optional, but only one file)
+ * - server.js (optional)
+ * - style.css (optional)
+ * - script.js (optional)
+ *
+ * Size limits:
+ * - Max 10 MB per file
+ * - Max 50 MB total archive
+ * - Max 10 files (excluding directories)
+ *
+ * @throws Error if archive contains multiple content/data files, both index.html and content.* files, unrecognized files, or exceeds size limits
+ */
+export declare const updateViaArchive: DbOperation<[DocumentQuery, Readable], void>;
+//# sourceMappingURL=updateViaArchive.d.ts.map

package/dist/operations/updateViaArchive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateViaArchive.d.ts","sourceRoot":"","sources":["../../src/operations/updateViaArchive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAqB,WAAW,EAAC,MAAM,YAAY,CAAA;AAK7E,OAAO,EAAC,QAAQ,EAAC,MAAM,QAAQ,CAAA;AAmB/B;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,IAAI,CAsOzE,CAAA"}

package/dist/operations/updateViaArchive.js

@@ -0,0 +1,229 @@
+import { upsert } from "./upsert.js";
+import { findDocument } from "./findDocument.js";
+import { extract as tarExtract } from 'tar-stream';
+import { createGunzip } from 'zlib';
+// Allowed file patterns
+const ALLOWED_FILES = ['settings.json', /^content\./, 'index.html', /^data\./, 'server.js', 'style.css', 'script.js'];
+// Size limits for archive processing
+const MAX_FILE_SIZE = 10 * 1024 * 1024; // 10 MB per file
+const MAX_ARCHIVE_FILES = ALLOWED_FILES.length; // Maximum number of files (excluding directories)
+const MAX_TOTAL_SIZE = MAX_FILE_SIZE * MAX_ARCHIVE_FILES; // Total archive size limit
+/**
+ * Update a document from a tar.gz archive
+ * Validates that the archive contains the expected files and no unexpected files
+ *
+ * Expected files:
+ * - settings.json (base document, required)
+ * - content.* (any extension, optional, but only one file) OR index.html (optional, mutually exclusive with content.*)
+ * - data.* (any extension, optional, but only one file)
+ * - server.js (optional)
+ * - style.css (optional)
+ * - script.js (optional)
+ *
+ * Size limits:
+ * - Max 10 MB per file
+ * - Max 50 MB total archive
+ * - Max 10 files (excluding directories)
+ *
+ * @throws Error if archive contains multiple content/data files, both index.html and content.* files, unrecognized files, or exceeds size limits
+ */
+export const updateViaArchive = async (client, query, stream) => {
+    // Create streams for decompression and extraction
+    const gunzip = createGunzip();
+    const extract = tarExtract();
+    // Track total bytes received for size validation
+    let totalBytesReceived = 0;
+    const MAX_BYTES_TO_TRACK = MAX_TOTAL_SIZE + 1; // Track one byte over limit to detect overflow
+    const archiveFiles = {};
+    const contentFiles = [];
+    const dataFiles = [];
+    const unrecognizedFiles = [];
+    let fileCount = 0;
+    let validationError = null;
+    // Helper to check if a filename matches allowed patterns
+    const isAllowedFile = (fileName) => {
+        return ALLOWED_FILES.some(pattern => {
+            if (typeof pattern === 'string') {
+                return fileName === pattern;
+            }
+            return pattern.test(fileName);
+        });
+    };
+    // Track total archive size as it streams through
+    gunzip.on('data', (chunk) => {
+        if (totalBytesReceived <= MAX_BYTES_TO_TRACK) {
+            totalBytesReceived += chunk.length;
+        }
+    });
+    // Set up tar extraction handlers
+    extract.on('entry', (header, stream, next) => {
+        const fileName = header.name;
+        const fileSize = header.size || 0;
+        // Skip directories
+        if (header.type === 'directory') {
+            stream.resume();
+            next();
+            return;
+        }
+        // Increment file count
+        fileCount++;
+        // Check file count limit
+        if (fileCount > MAX_ARCHIVE_FILES) {
+            validationError = validationError || new Error(`Archive contains too many files (max ${MAX_ARCHIVE_FILES})`);
+            stream.resume(); // Drain the stream
+            next();
+            return;
+        }
+        // Check individual file size
+        if (fileSize > MAX_FILE_SIZE) {
+            validationError =
+                validationError ||
+                    new Error(`File '${fileName}' size (${fileSize} bytes) exceeds maximum allowed size (${MAX_FILE_SIZE} bytes)`);
+            stream.resume(); // Drain the stream
+            next();
+            return;
+        }
+        // Check if file is allowed
+        if (!isAllowedFile(fileName)) {
+            unrecognizedFiles.push(fileName);
+            stream.resume();
+            next();
+            return;
+        }
+        // Collect file contents
+        const chunks = [];
+        stream.on('data', (chunk) => {
+            chunks.push(chunk);
+        });
+        stream.on('end', () => {
+            const content = Buffer.concat(chunks).toString('utf-8');
+            // Identify file types
+            if (fileName === 'settings.json') {
+                archiveFiles.settings = content;
+            }
+            else if (fileName === 'index.html' || fileName.startsWith('content.')) {
+                contentFiles.push(fileName);
+                archiveFiles.content = content;
+            }
+            else if (fileName.startsWith('data.')) {
+                dataFiles.push(fileName);
+                archiveFiles.data = content;
+            }
+            else if (fileName === 'server.js') {
+                archiveFiles.server = content;
+            }
+            else if (fileName === 'style.css') {
+                archiveFiles.style = content;
+            }
+            else if (fileName === 'script.js') {
+                archiveFiles.script = content;
+            }
+            next();
+        });
+        stream.resume();
+    });
+    // Process the archive
+    await new Promise((resolve, reject) => {
+        extract.on('finish', () => {
+            // Check if archive exceeded size limit
+            if (totalBytesReceived > MAX_TOTAL_SIZE) {
+                reject(new Error(`Archive size exceeds maximum allowed size (${MAX_TOTAL_SIZE} bytes)`));
+                return;
+            }
+            if (validationError) {
+                reject(validationError);
+            }
+            else {
+                resolve();
+            }
+        });
+        extract.on('error', reject);
+        gunzip.on('error', reject);
+        stream.pipe(gunzip).pipe(extract);
+    });
+    // Validation
+    if (!archiveFiles.settings) {
+        throw new Error('Archive must contain settings.json');
+    }
+    if (contentFiles.length > 1) {
+        throw new Error(`Archive contains multiple content files: ${contentFiles.join(', ')}. Only one content file is allowed (either index.html or a content.* file).`);
+    }
+    // Additional validation: if index.html exists, ensure no content.* files exist
+    const hasIndexHtml = contentFiles.includes('index.html');
+    const hasContentFiles = contentFiles.some(f => f.startsWith('content.'));
+    if (hasIndexHtml && hasContentFiles) {
+        throw new Error('Archive cannot contain both index.html and content.* files. Use only one format.');
+    }
+    if (dataFiles.length > 1) {
+        throw new Error(`Archive contains multiple data files: ${dataFiles.join(', ')}`);
+    }
+    if (unrecognizedFiles.length > 0) {
+        const allowedList = [
+            'settings.json',
+            'content.* (any extension)',
+            'index.html',
+            'data.* (any extension)',
+            'server.js',
+            'style.css',
+            'script.js',
+        ];
+        throw new Error(`Archive contains unrecognized files: ${unrecognizedFiles.join(', ')}\n` +
+            `Allowed files: ${allowedList.join(', ')}`);
+    }
+    // Parse settings.json
+    let settings;
+    try {
+        settings = JSON.parse(archiveFiles.settings);
+    }
+    catch (error) {
+        /* c8 ignore next */ // JSON.parse always throws Error objects, 'Unknown error' branch is unreachable
+        throw new Error('Failed to parse settings.json: ' + (error instanceof Error ? error.message : 'Unknown error'));
+    }
+    // Resolve slot_path to slot_id if provided
+    if (settings.slot_path && !settings.slot_id) {
+        const slotDoc = await findDocument(client, { path: settings.slot_path });
+        if (slotDoc) {
+            settings.slot_id = slotDoc.id;
+        }
+        // Remove the path field as it's not part of EditDocumentInput
+        delete settings.slot_path;
+    }
+    // Resolve template_path to template_id if provided
+    if (settings.template_path && !settings.template_id) {
+        const templateDoc = await findDocument(client, { path: settings.template_path });
+        if (templateDoc) {
+            settings.template_id = templateDoc.id;
+        }
+        // Remove the path field as it's not part of EditDocumentInput
+        delete settings.template_path;
+    }
+    // Convert query to object form for merging
+    const queryObj = typeof query === 'string' ? { path: query } : typeof query === 'number' ? { id: query } : query;
+    // Extract path from query object if it exists
+    const queryPath = typeof query === 'string'
+        ? query
+        : typeof query === 'object' && query !== null && 'path' in query
+            ? query.path
+            : undefined;
+    const docPath = settings.path ?? queryPath;
+    if (!docPath) {
+        throw new Error('Document path must be specified in either query or settings.json');
+    }
+    // Merge settings with file contents and query
+    // Using the single-parameter form of upsert which combines query and input
+    // Force published mode for archive uploads (not draft) - archive upload is a "publish" action
+    const documentInput = {
+        path: docPath,
+        ...settings,
+        draft: false, // Override any draft setting - archive upload publishes directly
+        published: true, // Ensure published is true
+        content: archiveFiles.content ?? settings.content,
+        data: archiveFiles.data ?? settings.data,
+        server: archiveFiles.server ?? settings.server,
+        style: archiveFiles.style ?? settings.style,
+        script: archiveFiles.script ?? settings.script,
+    };
+    // Upsert the document using combined form
+    await upsert(client, queryObj, documentInput);
+};
+//# sourceMappingURL=updateViaArchive.js.map