Sign in

flagon-io/g1t

public

g1t/services/packages/src/db.rs

1,247 lines50,225 bytesCodeBlame
1//! The packages database: packages, their versions and tags, the blobs
2//! they use, and uploads in progress.
3
4use g1t_contracts::time::rfc3339;
5use serde::Deserialize;
6use worker::wasm_bindgen::JsValue;
7use worker::{D1Database, D1PreparedStatement, Result};
8
9use crate::digest::Digest;
10use crate::upload::Progress;
11
12/// A day: how long an unreferenced blob is kept, and an upload left open.
13pub const DAY_MS: u64 = 24 * 60 * 60 * 1000;
14
15fn num(n: u64) -> JsValue {
16 JsValue::from(n as f64)
17}
18
19fn text(s: &str) -> JsValue {
20 JsValue::from(s)
21}
22
23fn opt(s: Option<&str>) -> JsValue {
24 s.map_or(JsValue::NULL, JsValue::from)
25}
26
27#[derive(Clone, Debug, Deserialize)]
28pub struct PackageRow {
29 pub id: String,
30 pub workspace: String,
31 pub ecosystem: String,
32 pub name: String,
33 pub repo_id: Option<String>,
34 pub repo_name: Option<String>,
35 pub visibility: String,
36 pub description: Option<String>,
37 pub created_by: String,
38 pub created_at: String,
39 pub updated_at: String,
40 pub downloads: u64,
41 /// Set while its workspace is deleted and may still be restored.
42 #[serde(default)]
43 pub workspace_deleted_at: Option<String>,
44}
45
46impl PackageRow {
47 pub fn public(&self) -> bool {
48 self.visibility == "public"
49 }
50
51 /// Whether its workspace is deleted: hidden from everyone.
52 pub fn hidden(&self) -> bool {
53 self.workspace_deleted_at.is_some()
54 }
55}
56
57/// A package with what listings add up about it.
58#[derive(Clone, Debug, Deserialize)]
59pub struct ListedRow {
60 #[serde(flatten)]
61 pub package: PackageRow,
62 pub version_count: u32,
63 pub bytes: u64,
64 pub latest_tag: Option<String>,
65 /// The version `latest_tag` points to: what an npm listing shows,
66 /// since its tags name versions rather than being what is installed.
67 #[serde(default)]
68 pub latest_tag_version: Option<String>,
69 /// Every version, newest published first, one per line: the summary
70 /// picks the highest of them (see `newest_version`).
71 pub latest_version: Option<String>,
72}
73
74/// The version a listing calls latest: the highest stable one by number
75/// (`v3.0.2` over `1.0.0`, whatever order they were published in, as an
76/// import publishes every tag at once), else the highest pre-release, else
77/// the newest published when none reads as a number.
78pub fn newest_version(versions: &str) -> Option<String> {
79 // Stable over pre-release, then by number, then pre-releases by label.
80 let parse = |version: &str| -> Option<(bool, Vec<u64>, String)> {
81 let bare = version.strip_prefix('v').unwrap_or(version);
82 let (core, pre) = match bare.split_once(['-', '+']) {
83 Some((core, rest)) if bare.as_bytes()[core.len()] == b'-' => (core, rest.to_owned()),
84 Some((core, _)) => (core, String::new()),
85 None => (bare, String::new()),
86 };
87 let parts = core.split('.').map(|part| part.parse::<u64>().ok()).collect::<Option<Vec<_>>>()?;
88 Some((pre.is_empty(), parts, pre))
89 };
90 let list: Vec<&str> = versions.lines().map(str::trim).filter(|v| !v.is_empty()).collect();
91 list.iter()
92 .filter_map(|v| parse(v).map(|key| (key, *v)))
93 .max_by(|a, b| a.0.cmp(&b.0))
94 .map(|(_, v)| v.to_owned())
95 .or_else(|| list.first().map(|v| (*v).to_owned()))
96}
97
98/// What a listing shows as a package's latest. An image's tag is what is
99/// pulled, so it is shown as is; npm's dist-tags (`latest`) name versions,
100/// so the version the tag points to is shown, as for every other registry.
101/// Without a tag, the highest version (see `newest_version`).
102pub fn latest_shown(row: &ListedRow) -> Option<String> {
103 let tagged = if row.package.ecosystem == "container" { &row.latest_tag } else { &row.latest_tag_version };
104 tagged.clone().or_else(|| row.latest_version.as_deref().and_then(newest_version))
105}
106
107#[cfg(test)]
108mod newest_tests {
109 use super::{ListedRow, PackageRow, latest_shown, newest_version};
110
111 fn listed(ecosystem: &str, tag: Option<&str>, tag_version: Option<&str>, versions: &str) -> ListedRow {
112 ListedRow {
113 package: PackageRow {
114 id: "pkg_1".into(),
115 workspace: "acme".into(),
116 ecosystem: ecosystem.into(),
117 name: "web".into(),
118 repo_id: None,
119 repo_name: None,
120 visibility: "private".into(),
121 description: None,
122 created_by: "usr_1".into(),
123 created_at: "2026-10-06T00:00:00.000Z".into(),
124 updated_at: "2026-10-06T00:00:00.000Z".into(),
125 downloads: 0,
126 workspace_deleted_at: None,
127 },
128 version_count: 2,
129 bytes: 0,
130 latest_tag: tag.map(str::to_owned),
131 latest_tag_version: tag_version.map(str::to_owned),
132 latest_version: Some(versions.to_owned()),
133 }
134 }
135
136 #[test]
137 fn npm_shows_the_version_its_tag_points_to_and_an_image_its_tag() {
138 let npm = listed("npm", Some("latest"), Some("1.2.0"), "2.0.0-beta.1\n1.2.0\n1.0.0");
139 assert_eq!(latest_shown(&npm).as_deref(), Some("1.2.0"), "the version, not the word latest");
140 let image = listed("container", Some("latest"), Some("sha256:abc"), "sha256:abc");
141 assert_eq!(latest_shown(&image).as_deref(), Some("latest"), "an image is pulled by its tag");
142 let cargo = listed("cargo", None, None, "0.9.0\n1.1.0\n1.0.0");
143 assert_eq!(latest_shown(&cargo).as_deref(), Some("1.1.0"), "no tags: the highest version");
144 let untagged = listed("container", None, None, "sha256:abc");
145 assert_eq!(latest_shown(&untagged).as_deref(), Some("sha256:abc"));
146 }
147
148 #[test]
149 fn the_latest_is_the_highest_stable_version_not_the_last_published() {
150 assert_eq!(newest_version("1.0.0
1513.0.2
1522.0.0
1533.0.0").as_deref(), Some("3.0.2"));
154 assert_eq!(newest_version("v1.10.0
155v1.9.3").as_deref(), Some("v1.10.0"));
156 assert_eq!(newest_version("4.0.0-beta.1
1573.0.2").as_deref(), Some("3.0.2"));
158 assert_eq!(newest_version("4.0.0-beta.1
1594.0.0-alpha").as_deref(), Some("4.0.0-beta.1"));
160 assert_eq!(newest_version("dev-main
161nightly").as_deref(), Some("dev-main"));
162 assert_eq!(newest_version(""), None);
163 }
164}
165
166#[derive(Clone, Debug, Deserialize)]
167pub struct BlobRow {
168 pub digest: String,
169 pub size: u64,
170 pub media_type: Option<String>,
171 pub object_key: String,
172}
173
174#[derive(Clone, Debug, Deserialize)]
175pub struct VersionRow {
176 pub id: String,
177 pub package_id: String,
178 pub version: String,
179 pub digest: String,
180 pub size: u64,
181 pub metadata: String,
182 pub subject: Option<String>,
183 pub published_by: Option<String>,
184 pub published_at: String,
185 /// npm's deprecation message, when the version is deprecated.
186 #[serde(default)]
187 pub deprecated: Option<String>,
188 /// Cargo: 1 when the version is yanked.
189 #[serde(default)]
190 pub yanked: u32,
191}
192
193impl VersionRow {
194 pub fn is_yanked(&self) -> bool {
195 self.yanked != 0
196 }
197}
198
199impl VersionRow {
200 pub fn meta(&self) -> serde_json::Value {
201 serde_json::from_str(&self.metadata).unwrap_or_default()
202 }
203
204 pub fn media_type(&self) -> Option<String> {
205 self.meta()["media_type"].as_str().map(str::to_owned)
206 }
207}
208
209#[derive(Clone, Debug, Deserialize)]
210pub struct TagRow {
211 pub tag: String,
212 pub version_id: String,
213 pub digest: String,
214 pub updated_at: String,
215}
216
217#[derive(Clone, Debug, Deserialize)]
218pub struct UploadRow {
219 pub id: String,
220 pub workspace: String,
221 pub package_id: String,
222 pub package: String,
223 pub multipart_id: Option<String>,
224 pub parts: String,
225 pub offset: u64,
226 pub tail: u64,
227 pub hash_state: String,
228}
229
230impl UploadRow {
231 pub fn progress(&self) -> Option<Progress> {
232 Some(Progress {
233 id: self.id.clone(),
234 multipart_id: self.multipart_id.clone(),
235 parts: serde_json::from_str(&self.parts).ok()?,
236 offset: self.offset,
237 tail: self.tail,
238 hasher: crate::digest::Sha256::restore(&self.hash_state)?,
239 })
240 }
241}
242
243/// One file of a version, as it is kept.
244#[derive(Clone, Debug, Deserialize)]
245pub struct FileRow {
246 pub name: String,
247 pub digest: String,
248 pub size: u64,
249 pub media_type: Option<String>,
250}
251
252/// A file's other checksums, in hex, beside its SHA-256 digest.
253#[derive(Clone, Debug, PartialEq, Eq, Deserialize)]
254pub struct Checksums {
255 pub md5: String,
256 pub sha1: String,
257 pub sha512: String,
258}
259
260impl Checksums {
261 pub fn of(bytes: &[u8]) -> Checksums {
262 use sha1::Digest as _;
263 Checksums {
264 md5: format!("{:x}", md5::compute(bytes)),
265 sha1: hex::encode(sha1::Sha1::digest(bytes)),
266 sha512: hex::encode(sha2::Sha512::digest(bytes)),
267 }
268 }
269}
270
271/// One file of a version, as it is recorded.
272pub struct NewFile {
273 pub name: String,
274 pub digest: String,
275 pub size: u64,
276 pub media_type: Option<String>,
277}
278
279/// A version to record.
280pub struct NewVersion {
281 pub id: String,
282 pub package_id: String,
283 pub version: String,
284 pub digest: String,
285 pub size: u64,
286 pub metadata: String,
287 pub subject: Option<String>,
288 pub published_by: Option<String>,
289 pub files: Vec<NewFile>,
290}
291
292const PACKAGE_COLUMNS: &str =
293 "id, workspace, ecosystem, name, repo_id, repo_name, visibility, description, created_by, created_at, updated_at, downloads, workspace_deleted_at";
294/// Workspaces that are deleted, waiting to be purged or restored.
295const DELETED_WORKSPACES: &str = "SELECT workspace FROM packages WHERE workspace_deleted_at IS NOT NULL";
296const VERSION_COLUMNS: &str = "id, package_id, version, digest, size, metadata, subject, published_by, published_at, deprecated, yanked";
297
298pub struct Db {
299 pub db: D1Database,
300}
301
302impl Db {
303 fn prepare(&self, sql: &str, values: &[JsValue]) -> Result<D1PreparedStatement> {
304 self.db.prepare(sql).bind(values)
305 }
306
307 pub async fn package(&self, workspace: &str, ecosystem: &str, name: &str) -> Result<Option<PackageRow>> {
308 self.prepare(
309 &format!("SELECT {PACKAGE_COLUMNS} FROM packages WHERE workspace = ? AND ecosystem = ? AND name = ?"),
310 &[text(workspace), text(ecosystem), text(name)],
311 )?
312 .first(None)
313 .await
314 }
315
316 /// A package by its name in any case: Cargo's names are one name
317 /// whatever their case (`Inflector` is `inflector`).
318 pub async fn package_any_case(&self, workspace: &str, ecosystem: &str, name: &str) -> Result<Option<PackageRow>> {
319 self.prepare(
320 &format!("SELECT {PACKAGE_COLUMNS} FROM packages WHERE workspace = ? AND ecosystem = ? AND name = ? COLLATE NOCASE LIMIT 1"),
321 &[text(workspace), text(ecosystem), text(name)],
322 )?
323 .first(None)
324 .await
325 }
326
327 /// The package a new crate's name would clash with: one named the same
328 /// apart from case and `-` against `_`, as crates.io decides.
329 pub async fn package_folded(&self, workspace: &str, ecosystem: &str, folded: &str) -> Result<Option<PackageRow>> {
330 self.prepare(
331 &format!(
332 "SELECT {PACKAGE_COLUMNS} FROM packages WHERE workspace = ? AND ecosystem = ? AND replace(lower(name), '_', '-') = ? LIMIT 1"
333 ),
334 &[text(workspace), text(ecosystem), text(folded)],
335 )?
336 .first(None)
337 .await
338 }
339
340 /// Whether the workspace has a private package of the ecosystem.
341 pub async fn has_private(&self, workspace: &str, ecosystem: &str) -> Result<bool> {
342 let row: Option<serde_json::Value> = self
343 .prepare(
344 "SELECT 1 AS private FROM packages WHERE workspace = ? AND ecosystem = ? AND visibility = 'private' AND workspace_deleted_at IS NULL LIMIT 1",
345 &[text(workspace), text(ecosystem)],
346 )?
347 .first(None)
348 .await?;
349 Ok(row.is_some())
350 }
351
352 pub async fn set_yanked(&self, version_id: &str, yanked: bool) -> Result<()> {
353 self.prepare("UPDATE versions SET yanked = ? WHERE id = ?", &[num(u64::from(yanked)), text(version_id)])?
354 .run()
355 .await?;
356 Ok(())
357 }
358
359 /// Makes a package unless one of the name is already there (a push
360 /// beside this one may have made it), and answers with the one kept.
361 #[allow(clippy::too_many_arguments)]
362 pub async fn create_package(
363 &self,
364 id: &str,
365 workspace: &str,
366 ecosystem: &str,
367 name: &str,
368 repo: Option<(&str, &str, bool)>,
369 created_by: &str,
370 now_ms: u64,
371 ) -> Result<PackageRow> {
372 let now = rfc3339(now_ms);
373 let visibility = match repo {
374 Some((_, _, private)) if !private => "public",
375 _ => "private",
376 };
377 self.prepare(
378 "INSERT OR IGNORE INTO packages (id, workspace, ecosystem, name, repo_id, repo_name, visibility, created_by, created_at, updated_at)
379 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
380 &[
381 text(id),
382 text(workspace),
383 text(ecosystem),
384 text(name),
385 opt(repo.map(|r| r.0)),
386 opt(repo.map(|r| r.1)),
387 text(visibility),
388 text(created_by),
389 text(&now),
390 text(&now),
391 ],
392 )?
393 .run()
394 .await?;
395 self.package(workspace, ecosystem, name)
396 .await?
397 .ok_or_else(|| worker::Error::RustError(format!("package {workspace}/{name} was not made")))
398 }
399
400 /// A workspace's packages with their counts, newest first.
401 pub async fn list(
402 &self,
403 workspace: &str,
404 ecosystem: Option<&str>,
405 repo_id: Option<&str>,
406 query: Option<&str>,
407 limit: u32,
408 ) -> Result<Vec<ListedRow>> {
409 let mut sql = format!(
410 "SELECT {}, \
411 (SELECT COUNT(*) FROM versions v WHERE v.package_id = p.id) AS version_count, \
412 (SELECT COALESCE(SUM(b.size), 0) FROM blobs b WHERE b.digest IN \
413 (SELECT vf.digest FROM version_files vf JOIN versions v ON v.id = vf.version_id WHERE v.package_id = p.id)) AS bytes, \
414 (SELECT t.tag FROM tags t WHERE t.package_id = p.id ORDER BY t.tag = 'latest' DESC, t.updated_at DESC LIMIT 1) AS latest_tag, \
415 (SELECT v.version FROM tags t JOIN versions v ON v.id = t.version_id WHERE t.package_id = p.id \
416 ORDER BY t.tag = 'latest' DESC, t.updated_at DESC LIMIT 1) AS latest_tag_version, \
417 (SELECT GROUP_CONCAT(version, char(10)) FROM \
418 (SELECT v.version FROM versions v WHERE v.package_id = p.id AND v.yanked = 0 ORDER BY v.published_at DESC)) AS latest_version \
419 FROM packages p WHERE p.workspace = ? AND p.workspace_deleted_at IS NULL",
420 PACKAGE_COLUMNS.split(", ").map(|c| format!("p.{c}")).collect::<Vec<_>>().join(", ")
421 );
422 let mut values = vec![text(workspace)];
423 if let Some(ecosystem) = ecosystem {
424 sql.push_str(" AND p.ecosystem = ?");
425 values.push(text(ecosystem));
426 }
427 if let Some(repo_id) = repo_id {
428 sql.push_str(" AND p.repo_id = ?");
429 values.push(text(repo_id));
430 }
431 if let Some(query) = query.map(str::trim).filter(|q| !q.is_empty()) {
432 sql.push_str(" AND p.name LIKE ? ESCAPE '\\'");
433 let escaped = query.replace('\\', "\\\\").replace('%', "\\%").replace('_', "\\_");
434 values.push(text(&format!("%{}%", escaped.to_lowercase())));
435 }
436 sql.push_str(&format!(" ORDER BY p.updated_at DESC LIMIT {limit}"));
437 self.prepare(&sql, &values)?.all().await?.results()
438 }
439
440 pub async fn set_visibility(&self, package_id: &str, visibility: &str, now_ms: u64) -> Result<()> {
441 self.prepare(
442 "UPDATE packages SET visibility = ?, updated_at = ? WHERE id = ?",
443 &[text(visibility), text(&rfc3339(now_ms)), text(package_id)],
444 )?
445 .run()
446 .await?;
447 Ok(())
448 }
449
450 pub async fn set_link(&self, package_id: &str, repo: Option<(&str, &str)>, visibility: &str, now_ms: u64) -> Result<()> {
451 self.prepare(
452 "UPDATE packages SET repo_id = ?, repo_name = ?, visibility = ?, updated_at = ? WHERE id = ?",
453 &[opt(repo.map(|r| r.0)), opt(repo.map(|r| r.1)), text(visibility), text(&rfc3339(now_ms)), text(package_id)],
454 )?
455 .run()
456 .await?;
457 Ok(())
458 }
459
460 pub async fn add_downloads(&self, counts: &[(String, u64)]) -> Result<()> {
461 if counts.is_empty() {
462 return Ok(());
463 }
464 let mut batch = Vec::with_capacity(counts.len());
465 for (id, count) in counts {
466 batch.push(self.prepare("UPDATE packages SET downloads = downloads + ? WHERE id = ?", &[num(*count), text(id)])?);
467 }
468 self.db.batch(batch).await?;
469 Ok(())
470 }
471
472 /// A package and everything it holds. Its blobs are left to the sweep.
473 pub async fn delete_package(&self, package_id: &str) -> Result<()> {
474 let id = [text(package_id)];
475 self.db
476 .batch(vec![
477 self.prepare("DELETE FROM tags WHERE package_id = ?", &id)?,
478 self.prepare("DELETE FROM version_files WHERE version_id IN (SELECT id FROM versions WHERE package_id = ?)", &id)?,
479 self.prepare("DELETE FROM versions WHERE package_id = ?", &id)?,
480 self.prepare("DELETE FROM package_blobs WHERE package_id = ?", &id)?,
481 self.prepare("DELETE FROM uploads WHERE package_id = ?", &id)?,
482 self.prepare("DELETE FROM packages WHERE id = ?", &id)?,
483 ])
484 .await?;
485 Ok(())
486 }
487
488 pub async fn blob(&self, digest: &Digest) -> Result<Option<BlobRow>> {
489 self.prepare("SELECT digest, size, media_type, object_key FROM blobs WHERE digest = ?", &[text(digest.as_str())])?
490 .first(None)
491 .await
492 }
493
494 /// The blob, if this package may serve it.
495 pub async fn package_blob(&self, package_id: &str, digest: &Digest) -> Result<Option<BlobRow>> {
496 self.prepare(
497 "SELECT b.digest, b.size, b.media_type, b.object_key FROM package_blobs pb JOIN blobs b ON b.digest = pb.digest
498 WHERE pb.package_id = ? AND pb.digest = ?",
499 &[text(package_id), text(digest.as_str())],
500 )?
501 .first(None)
502 .await
503 }
504
505 /// Records a stored blob, or where it is now, and lets the package
506 /// serve it. Either way the blob is marked as just used.
507 pub async fn keep_blob(&self, package_id: &str, digest: &Digest, size: u64, media_type: Option<&str>, key: &str, now_ms: u64) -> Result<()> {
508 let now = rfc3339(now_ms);
509 self.db
510 .batch(vec![
511 self.prepare(
512 "INSERT INTO blobs (digest, size, media_type, object_key, created_at, touched_at) VALUES (?, ?, ?, ?, ?, ?)
513 ON CONFLICT (digest) DO UPDATE SET object_key = excluded.object_key, size = excluded.size",
514 &[text(digest.as_str()), num(size), opt(media_type), text(key), text(&now), text(&now)],
515 )?,
516 self.prepare("UPDATE blobs SET touched_at = ? WHERE digest = ?", &[text(&now), text(digest.as_str())])?,
517 self.prepare(
518 "INSERT OR IGNORE INTO package_blobs (package_id, digest, created_at) VALUES (?, ?, ?)",
519 &[text(package_id), text(digest.as_str()), text(&now)],
520 )?,
521 ])
522 .await?;
523 Ok(())
524 }
525
526 /// Lets the package serve a blob that is already stored.
527 pub async fn link_blob(&self, package_id: &str, digest: &Digest, now_ms: u64) -> Result<()> {
528 let now = rfc3339(now_ms);
529 self.db
530 .batch(vec![
531 self.prepare("UPDATE blobs SET touched_at = ? WHERE digest = ?", &[text(&now), text(digest.as_str())])?,
532 self.prepare(
533 "INSERT OR IGNORE INTO package_blobs (package_id, digest, created_at) VALUES (?, ?, ?)",
534 &[text(package_id), text(digest.as_str()), text(&now)],
535 )?,
536 ])
537 .await?;
538 Ok(())
539 }
540
541 /// Whether any version of the package names the blob.
542 pub async fn blob_in_use(&self, package_id: &str, digest: &Digest) -> Result<bool> {
543 let row: Option<serde_json::Value> = self
544 .prepare(
545 "SELECT 1 AS used FROM version_files vf JOIN versions v ON v.id = vf.version_id WHERE v.package_id = ? AND vf.digest = ? LIMIT 1",
546 &[text(package_id), text(digest.as_str())],
547 )?
548 .first(None)
549 .await?;
550 Ok(row.is_some())
551 }
552
553 pub async fn unlink_blob(&self, package_id: &str, digest: &Digest) -> Result<()> {
554 self.prepare("DELETE FROM package_blobs WHERE package_id = ? AND digest = ?", &[text(package_id), text(digest.as_str())])?
555 .run()
556 .await?;
557 Ok(())
558 }
559
560 pub async fn create_upload(&self, row: &UploadRow, now_ms: u64) -> Result<()> {
561 self.prepare(
562 "INSERT INTO uploads (id, workspace, package_id, package, parts, \"offset\", tail, hash_state, created_at, expires_at)
563 VALUES (?, ?, ?, ?, '[]', 0, 0, ?, ?, ?)",
564 &[
565 text(&row.id),
566 text(&row.workspace),
567 text(&row.package_id),
568 text(&row.package),
569 text(&row.hash_state),
570 text(&rfc3339(now_ms)),
571 text(&rfc3339(now_ms + DAY_MS)),
572 ],
573 )?
574 .run()
575 .await?;
576 Ok(())
577 }
578
579 pub async fn upload(&self, id: &str) -> Result<Option<UploadRow>> {
580 self.prepare(
581 "SELECT id, workspace, package_id, package, multipart_id, parts, \"offset\" AS offset, tail, hash_state FROM uploads WHERE id = ?",
582 &[text(id)],
583 )?
584 .first(None)
585 .await
586 }
587
588 pub async fn save_progress(&self, progress: &Progress, now_ms: u64) -> Result<()> {
589 self.prepare(
590 "UPDATE uploads SET multipart_id = ?, parts = ?, \"offset\" = ?, tail = ?, hash_state = ?, expires_at = ? WHERE id = ?",
591 &[
592 opt(progress.multipart_id.as_deref()),
593 text(&serde_json::to_string(&progress.parts)?),
594 num(progress.offset),
595 num(progress.tail),
596 text(&progress.hasher.save()),
597 text(&rfc3339(now_ms + DAY_MS)),
598 text(&progress.id),
599 ],
600 )?
601 .run()
602 .await?;
603 Ok(())
604 }
605
606 pub async fn delete_upload(&self, id: &str) -> Result<()> {
607 self.prepare("DELETE FROM uploads WHERE id = ?", &[text(id)])?.run().await?;
608 Ok(())
609 }
610
611 pub async fn expired_uploads(&self, now_ms: u64, limit: u32) -> Result<Vec<UploadRow>> {
612 self.prepare(
613 &format!(
614 "SELECT id, workspace, package_id, package, multipart_id, parts, \"offset\" AS offset, tail, hash_state
615 FROM uploads WHERE expires_at < ? ORDER BY expires_at LIMIT {limit}"
616 ),
617 &[text(&rfc3339(now_ms))],
618 )?
619 .all()
620 .await?
621 .results()
622 }
623
624 pub async fn version_by_digest(&self, package_id: &str, digest: &str) -> Result<Option<VersionRow>> {
625 self.prepare(
626 &format!("SELECT {VERSION_COLUMNS} FROM versions WHERE package_id = ? AND digest = ? LIMIT 1"),
627 &[text(package_id), text(digest)],
628 )?
629 .first(None)
630 .await
631 }
632
633 pub async fn version_by_tag(&self, package_id: &str, tag: &str) -> Result<Option<VersionRow>> {
634 self.prepare(
635 &format!(
636 "SELECT {} FROM tags t JOIN versions v ON v.id = t.version_id WHERE t.package_id = ? AND t.tag = ?",
637 VERSION_COLUMNS.split(", ").map(|c| format!("v.{c}")).collect::<Vec<_>>().join(", ")
638 ),
639 &[text(package_id), text(tag)],
640 )?
641 .first(None)
642 .await
643 }
644
645 /// A version by its version, digest, or a tag that points to it.
646 pub async fn find_version(&self, package_id: &str, reference: &str) -> Result<Option<VersionRow>> {
647 if let Some(found) = self.version_by_digest(package_id, reference).await? {
648 return Ok(Some(found));
649 }
650 let by_version: Option<VersionRow> = self
651 .prepare(
652 &format!("SELECT {VERSION_COLUMNS} FROM versions WHERE package_id = ? AND version = ?"),
653 &[text(package_id), text(reference)],
654 )?
655 .first(None)
656 .await?;
657 if by_version.is_some() {
658 return Ok(by_version);
659 }
660 self.version_by_tag(package_id, reference).await
661 }
662
663 pub async fn versions(&self, package_id: &str, limit: u32) -> Result<Vec<VersionRow>> {
664 self.prepare(
665 &format!("SELECT {VERSION_COLUMNS} FROM versions WHERE package_id = ? ORDER BY published_at DESC, id DESC LIMIT {limit}"),
666 &[text(package_id)],
667 )?
668 .all()
669 .await?
670 .results()
671 }
672
673 /// Records a version unless one of its digest is there, moves `tag` to
674 /// it, and says whether anything was published: a new version, or a
675 /// tag that now points somewhere else.
676 pub async fn publish(&self, version: NewVersion, tag: Option<&str>, now_ms: u64) -> Result<(VersionRow, bool)> {
677 let now = rfc3339(now_ms);
678 let existing = self.version_by_digest(&version.package_id, &version.digest).await?;
679 let mut changed = existing.is_none();
680 let mut batch = Vec::new();
681 let version_id = match &existing {
682 Some(row) => row.id.clone(),
683 None => {
684 batch.push(self.prepare(
685 "INSERT INTO versions (id, package_id, version, digest, size, metadata, subject, published_by, published_at)
686 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)",
687 &[
688 text(&version.id),
689 text(&version.package_id),
690 text(&version.version),
691 text(&version.digest),
692 num(version.size),
693 text(&version.metadata),
694 opt(version.subject.as_deref()),
695 opt(version.published_by.as_deref()),
696 text(&now),
697 ],
698 )?);
699 for file in &version.files {
700 batch.push(self.prepare(
701 "INSERT OR IGNORE INTO version_files (version_id, name, digest, size, media_type) VALUES (?, ?, ?, ?, ?)",
702 &[text(&version.id), text(&file.name), text(&file.digest), num(file.size), opt(file.media_type.as_deref())],
703 )?);
704 }
705 version.id.clone()
706 }
707 };
708 if let Some(tag) = tag {
709 let before = self.version_by_tag(&version.package_id, tag).await?;
710 changed |= before.map(|row| row.id) != Some(version_id.clone());
711 batch.push(self.prepare(
712 "INSERT INTO tags (package_id, tag, version_id, updated_at) VALUES (?, ?, ?, ?)
713 ON CONFLICT (package_id, tag) DO UPDATE SET version_id = excluded.version_id, updated_at = excluded.updated_at",
714 &[text(&version.package_id), text(tag), text(&version_id), text(&now)],
715 )?);
716 }
717 if changed {
718 batch.push(self.prepare("UPDATE packages SET updated_at = ? WHERE id = ?", &[text(&now), text(&version.package_id)])?);
719 }
720 if !batch.is_empty() {
721 self.db.batch(batch).await?;
722 }
723 let row = self
724 .version_by_digest(&version.package_id, &version.digest)
725 .await?
726 .ok_or_else(|| worker::Error::RustError("the version was not recorded".into()))?;
727 Ok((row, changed))
728 }
729
730 pub async fn tags(&self, package_id: &str) -> Result<Vec<TagRow>> {
731 self.prepare(
732 "SELECT t.tag, t.version_id, v.digest, t.updated_at FROM tags t JOIN versions v ON v.id = t.version_id
733 WHERE t.package_id = ? ORDER BY t.tag",
734 &[text(package_id)],
735 )?
736 .all()
737 .await?
738 .results()
739 }
740
741 /// Tag names in order, `n` of them after `last`.
742 pub async fn tag_names(&self, package_id: &str, last: Option<&str>, n: u32) -> Result<Vec<String>> {
743 #[derive(Deserialize)]
744 struct Name {
745 tag: String,
746 }
747 let rows: Vec<Name> = self
748 .prepare(
749 &format!("SELECT tag FROM tags WHERE package_id = ? AND tag > ? ORDER BY tag LIMIT {n}"),
750 &[text(package_id), text(last.unwrap_or(""))],
751 )?
752 .all()
753 .await?
754 .results()?;
755 Ok(rows.into_iter().map(|row| row.tag).collect())
756 }
757
758 pub async fn referrers(&self, package_id: &str, subject: &str) -> Result<Vec<VersionRow>> {
759 self.prepare(
760 &format!("SELECT {VERSION_COLUMNS} FROM versions WHERE package_id = ? AND subject = ? ORDER BY published_at"),
761 &[text(package_id), text(subject)],
762 )?
763 .all()
764 .await?
765 .results()
766 }
767
768 /// The package of an ecosystem built from a repository (Composer's).
769 pub async fn package_for_repo(&self, repo_id: &str, ecosystem: &str) -> Result<Option<PackageRow>> {
770 self.prepare(
771 &format!("SELECT {PACKAGE_COLUMNS} FROM packages WHERE repo_id = ? AND ecosystem = ? LIMIT 1"),
772 &[text(repo_id), text(ecosystem)],
773 )?
774 .first(None)
775 .await
776 }
777
778 pub async fn rename_package(&self, package_id: &str, name: &str, now_ms: u64) -> Result<()> {
779 self.prepare(
780 "UPDATE packages SET name = ?, updated_at = ? WHERE id = ?",
781 &[text(name), text(&rfc3339(now_ms)), text(package_id)],
782 )?
783 .run()
784 .await?;
785 Ok(())
786 }
787
788 /// Records a version, in place of one of the same version string
789 /// (a tag or branch that moved): its files and tags go with the old one.
790 pub async fn replace_version(&self, version: &NewVersion, now_ms: u64) -> Result<()> {
791 let now = rfc3339(now_ms);
792 let old = [text(&version.package_id), text(&version.version)];
793 let old_ids = "SELECT id FROM versions WHERE package_id = ? AND version = ?";
794 let mut batch = vec![
795 self.prepare(&format!("DELETE FROM tags WHERE version_id IN ({old_ids})"), &old)?,
796 self.prepare(&format!("DELETE FROM version_files WHERE version_id IN ({old_ids})"), &old)?,
797 self.prepare("DELETE FROM versions WHERE package_id = ? AND version = ?", &old)?,
798 self.prepare(
799 "INSERT INTO versions (id, package_id, version, digest, size, metadata, subject, published_by, published_at)
800 VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?)",
801 &[
802 text(&version.id),
803 text(&version.package_id),
804 text(&version.version),
805 text(&version.digest),
806 num(version.size),
807 text(&version.metadata),
808 opt(version.published_by.as_deref()),
809 text(&now),
810 ],
811 )?,
812 ];
813 for file in &version.files {
814 batch.push(self.prepare(
815 "INSERT OR IGNORE INTO version_files (version_id, name, digest, size, media_type) VALUES (?, ?, ?, ?, ?)",
816 &[text(&version.id), text(&file.name), text(&file.digest), num(file.size), opt(file.media_type.as_deref())],
817 )?);
818 }
819 batch.push(self.prepare("UPDATE packages SET updated_at = ? WHERE id = ?", &[text(&now), text(&version.package_id)])?);
820 self.db.batch(batch).await?;
821 Ok(())
822 }
823
824 /// The zip already made of a commit of the package, if one was.
825 pub async fn dist_for_commit(&self, package_id: &str, commit: &str) -> Result<Option<BlobRow>> {
826 self.prepare(
827 "SELECT b.digest, b.size, b.media_type, b.object_key FROM versions v
828 JOIN version_files vf ON vf.version_id = v.id AND vf.name = 'dist'
829 JOIN blobs b ON b.digest = vf.digest
830 WHERE v.package_id = ? AND v.digest = ? LIMIT 1",
831 &[text(package_id), text(commit)],
832 )?
833 .first(None)
834 .await
835 }
836
837 /// Records the zip of a commit as a file of every version at it.
838 pub async fn add_dist(&self, package_id: &str, commit: &str, digest: &Digest, size: u64) -> Result<()> {
839 let at = [text(package_id), text(commit)];
840 self.db
841 .batch(vec![
842 self.prepare(
843 "INSERT OR IGNORE INTO version_files (version_id, name, digest, size, media_type)
844 SELECT id, 'dist', ?, ?, 'application/zip' FROM versions WHERE package_id = ? AND digest = ?",
845 &[text(digest.as_str()), num(size), text(package_id), text(commit)],
846 )?,
847 self.prepare("UPDATE versions SET size = ? WHERE package_id = ? AND digest = ?", &[num(size), at[0].clone(), at[1].clone()])?,
848 ])
849 .await?;
850 Ok(())
851 }
852
853 /// Where the Composer backfill is: the last repository done, and
854 /// whether it went through them all.
855 pub async fn backfill(&self) -> Result<(Option<String>, bool)> {
856 #[derive(Deserialize)]
857 struct Row {
858 after: Option<String>,
859 finished_at: Option<String>,
860 }
861 let row: Option<Row> = self
862 .prepare("SELECT after, finished_at FROM composer_backfill WHERE key = 'repos'", &[])?
863 .first(None)
864 .await?;
865 Ok(row.map_or((None, false), |row| (row.after, row.finished_at.is_some())))
866 }
867
868 pub async fn set_backfill(&self, after: Option<&str>, finished: bool, now_ms: u64) -> Result<()> {
869 self.prepare(
870 "INSERT INTO composer_backfill (key, after, finished_at) VALUES ('repos', ?, ?)
871 ON CONFLICT (key) DO UPDATE SET after = excluded.after, finished_at = excluded.finished_at",
872 &[opt(after), if finished { text(&rfc3339(now_ms)) } else { JsValue::NULL }],
873 )?
874 .run()
875 .await?;
876 Ok(())
877 }
878
879 /// Points `tag` at a version, made or moved.
880 pub async fn set_tag(&self, package_id: &str, tag: &str, version_id: &str, now_ms: u64) -> Result<()> {
881 self.prepare(
882 "INSERT INTO tags (package_id, tag, version_id, updated_at) VALUES (?, ?, ?, ?)
883 ON CONFLICT (package_id, tag) DO UPDATE SET version_id = excluded.version_id, updated_at = excluded.updated_at",
884 &[text(package_id), text(tag), text(version_id), text(&rfc3339(now_ms))],
885 )?
886 .run()
887 .await?;
888 Ok(())
889 }
890
891 /// A version by its version string alone.
892 pub async fn version_named(&self, package_id: &str, version: &str) -> Result<Option<VersionRow>> {
893 self.prepare(
894 &format!("SELECT {VERSION_COLUMNS} FROM versions WHERE package_id = ? AND version = ?"),
895 &[text(package_id), text(version)],
896 )?
897 .first(None)
898 .await
899 }
900
901 pub async fn set_deprecated(&self, version_id: &str, message: Option<&str>) -> Result<()> {
902 self.prepare("UPDATE versions SET deprecated = ? WHERE id = ?", &[opt(message), text(version_id)])?
903 .run()
904 .await?;
905 Ok(())
906 }
907
908 /// The README shown for the package, kept as a blob, and its description.
909 pub async fn set_readme(&self, package_id: &str, digest: Option<&str>, description: Option<&str>, now_ms: u64) -> Result<()> {
910 self.prepare(
911 "UPDATE packages SET readme_digest = ?, description = ?, updated_at = ? WHERE id = ?",
912 &[opt(digest), opt(description), text(&rfc3339(now_ms)), text(package_id)],
913 )?
914 .run()
915 .await?;
916 Ok(())
917 }
918
919 pub async fn readme_digest(&self, package_id: &str) -> Result<Option<String>> {
920 #[derive(Deserialize)]
921 struct Readme {
922 readme_digest: Option<String>,
923 }
924 let row: Option<Readme> = self
925 .prepare("SELECT readme_digest FROM packages WHERE id = ?", &[text(package_id)])?
926 .first(None)
927 .await?;
928 Ok(row.and_then(|r| r.readme_digest))
929 }
930
931 pub async fn touch_package(&self, package_id: &str, now_ms: u64) -> Result<()> {
932 self.prepare("UPDATE packages SET updated_at = ? WHERE id = ?", &[text(&rfc3339(now_ms)), text(package_id)])?
933 .run()
934 .await?;
935 Ok(())
936 }
937
938 pub async fn delete_tag(&self, package_id: &str, tag: &str) -> Result<()> {
939 self.prepare("DELETE FROM tags WHERE package_id = ? AND tag = ?", &[text(package_id), text(tag)])?
940 .run()
941 .await?;
942 Ok(())
943 }
944
945 /// A version, its tags and its files. Blobs are left to the sweep.
946 pub async fn delete_version(&self, version_id: &str) -> Result<()> {
947 let id = [text(version_id)];
948 self.db
949 .batch(vec![
950 self.prepare("DELETE FROM tags WHERE version_id = ?", &id)?,
951 self.prepare("DELETE FROM version_files WHERE version_id = ?", &id)?,
952 self.prepare("DELETE FROM versions WHERE id = ?", &id)?,
953 ])
954 .await?;
955 Ok(())
956 }
957
958 /// Works out again what the workspace stores: each blob its versions
959 /// use, once, public when any public package uses it.
960 pub async fn measure(&self, workspace: &str) -> Result<()> {
961 let ws = [text(workspace)];
962 self.db
963 .batch(vec![
964 self.prepare("DELETE FROM workspace_blobs WHERE workspace = ?", &ws)?,
965 self.prepare(
966 "INSERT INTO workspace_blobs (workspace, digest, size, public)
967 SELECT p.workspace, vf.digest, MAX(vf.size), MAX(p.visibility = 'public')
968 FROM version_files vf JOIN versions v ON v.id = vf.version_id JOIN packages p ON p.id = v.package_id
969 WHERE p.workspace = ? GROUP BY vf.digest",
970 &ws,
971 )?,
972 ])
973 .await?;
974 Ok(())
975 }
976
977 pub async fn storage(&self, workspace: &str) -> Result<(u64, u64)> {
978 #[derive(Deserialize)]
979 struct Sums {
980 public_bytes: Option<u64>,
981 private_bytes: Option<u64>,
982 }
983 let sums: Option<Sums> = self
984 .prepare(
985 &format!(
986 "SELECT SUM(CASE WHEN public = 1 THEN size ELSE 0 END) AS public_bytes,
987 SUM(CASE WHEN public = 1 THEN 0 ELSE size END) AS private_bytes
988 FROM workspace_blobs WHERE workspace = ? AND workspace NOT IN ({DELETED_WORKSPACES})"
989 ),
990 &[text(workspace)],
991 )?
992 .first(None)
993 .await?;
994 Ok(sums.map_or((0, 0), |s| (s.public_bytes.unwrap_or(0), s.private_bytes.unwrap_or(0))))
995 }
996
997 /// Hides (`deleted_at` given) or shows again (`None`) a workspace's
998 /// packages. Hiding keeps a mark already set; showing clears only marks.
999 pub async fn mark_workspace(&self, workspace: &str, deleted_at: Option<&str>) -> Result<()> {
1000 let statement = match deleted_at {
1001 Some(at) => self.prepare(
1002 "UPDATE packages SET workspace_deleted_at = ? WHERE workspace = ? AND workspace_deleted_at IS NULL",
1003 &[text(at), text(workspace)],
1004 )?,
1005 None => self.prepare(
1006 "UPDATE packages SET workspace_deleted_at = NULL WHERE workspace = ? AND workspace_deleted_at IS NOT NULL",
1007 &[text(workspace)],
1008 )?,
1009 };
1010 statement.run().await?;
1011 Ok(())
1012 }
1013
1014 /// Whether the workspace is deleted, as its packages say.
1015 pub async fn workspace_hidden(&self, workspace: &str) -> Result<bool> {
1016 let row: Option<serde_json::Value> = self
1017 .prepare("SELECT 1 AS hidden FROM packages WHERE workspace = ? AND workspace_deleted_at IS NOT NULL LIMIT 1", &[text(workspace)])?
1018 .first(None)
1019 .await?;
1020 Ok(row.is_some())
1021 }
1022
1023 /// Every workspace's package storage, by workspace.
1024 pub async fn storage_all(&self) -> Result<Vec<g1t_contracts::packages::WorkspacePackageStorage>> {
1025 self.prepare(
1026 &format!(
1027 "SELECT workspace,
1028 COALESCE(SUM(CASE WHEN public = 1 THEN size ELSE 0 END), 0) AS public_bytes,
1029 COALESCE(SUM(CASE WHEN public = 1 THEN 0 ELSE size END), 0) AS private_bytes
1030 FROM workspace_blobs WHERE workspace NOT IN ({DELETED_WORKSPACES}) GROUP BY workspace ORDER BY workspace"
1031 ),
1032 &[],
1033 )?
1034 .all()
1035 .await?
1036 .results()
1037 }
1038
1039 /// Which of `digests` the workspace already holds.
1040 pub async fn held(&self, workspace: &str, digests: &[String]) -> Result<std::collections::HashSet<String>> {
1041 #[derive(Deserialize)]
1042 struct Held {
1043 digest: String,
1044 }
1045 let mut held = std::collections::HashSet::new();
1046 for chunk in digests.chunks(50) {
1047 let marks = vec!["?"; chunk.len()].join(", ");
1048 let mut values = vec![text(workspace)];
1049 values.extend(chunk.iter().map(|d| text(d)));
1050 let rows: Vec<Held> = self
1051 .prepare(&format!("SELECT digest FROM workspace_blobs WHERE workspace = ? AND digest IN ({marks})"), &values)?
1052 .all()
1053 .await?
1054 .results()?;
1055 held.extend(rows.into_iter().map(|row| row.digest));
1056 }
1057 Ok(held)
1058 }
1059
1060 /// Blobs no version uses and nothing has touched for a day.
1061 pub async fn unused_blobs(&self, now_ms: u64, limit: u32) -> Result<Vec<BlobRow>> {
1062 self.prepare(
1063 &format!(
1064 "SELECT digest, size, media_type, object_key FROM blobs b
1065 WHERE touched_at < ? AND NOT EXISTS (SELECT 1 FROM version_files vf WHERE vf.digest = b.digest)
1066 AND NOT EXISTS (SELECT 1 FROM packages p WHERE p.readme_digest = b.digest)
1067 ORDER BY touched_at LIMIT {limit}"
1068 ),
1069 &[text(&rfc3339(now_ms.saturating_sub(DAY_MS)))],
1070 )?
1071 .all()
1072 .await?
1073 .results()
1074 }
1075
1076 /// A version by its version string, made from `version` when there is
1077 /// none, and whether it was made now. Files are added one at a time
1078 /// with `put_file` (Maven uploads each in a request of its own).
1079 pub async fn version_or_new(&self, version: &NewVersion, now_ms: u64) -> Result<(VersionRow, bool)> {
1080 self.prepare(
1081 "INSERT OR IGNORE INTO versions (id, package_id, version, digest, size, metadata, subject, published_by, published_at)
1082 VALUES (?, ?, ?, ?, 0, ?, NULL, ?, ?)",
1083 &[
1084 text(&version.id),
1085 text(&version.package_id),
1086 text(&version.version),
1087 text(&version.digest),
1088 text(&version.metadata),
1089 opt(version.published_by.as_deref()),
1090 text(&rfc3339(now_ms)),
1091 ],
1092 )?
1093 .run()
1094 .await?;
1095 let row = self
1096 .version_named(&version.package_id, &version.version)
1097 .await?
1098 .ok_or_else(|| worker::Error::RustError("the version was not recorded".into()))?;
1099 let made = row.id == version.id;
1100 Ok((row, made))
1101 }
1102
1103 /// Adds a file to a version, or replaces the one of its name, and
1104 /// works out the version's size again.
1105 pub async fn put_file(&self, package_id: &str, version_id: &str, file: &NewFile, now_ms: u64) -> Result<()> {
1106 let now = rfc3339(now_ms);
1107 self.db
1108 .batch(vec![
1109 self.prepare(
1110 "INSERT INTO version_files (version_id, name, digest, size, media_type) VALUES (?, ?, ?, ?, ?)
1111 ON CONFLICT (version_id, name) DO UPDATE SET digest = excluded.digest, size = excluded.size, media_type = excluded.media_type",
1112 &[text(version_id), text(&file.name), text(&file.digest), num(file.size), opt(file.media_type.as_deref())],
1113 )?,
1114 self.prepare(
1115 "UPDATE versions SET size = (SELECT COALESCE(SUM(size), 0) FROM version_files WHERE version_id = ?) WHERE id = ?",
1116 &[text(version_id), text(version_id)],
1117 )?,
1118 self.prepare("UPDATE packages SET updated_at = ? WHERE id = ?", &[text(&now), text(package_id)])?,
1119 ])
1120 .await?;
1121 Ok(())
1122 }
1123
1124 /// A version's files, by name.
1125 pub async fn files(&self, version_id: &str) -> Result<Vec<FileRow>> {
1126 self.prepare("SELECT name, digest, size, media_type FROM version_files WHERE version_id = ? ORDER BY name", &[text(version_id)])?
1127 .all()
1128 .await?
1129 .results()
1130 }
1131
1132 pub async fn file(&self, version_id: &str, name: &str) -> Result<Option<FileRow>> {
1133 self.prepare(
1134 "SELECT name, digest, size, media_type FROM version_files WHERE version_id = ? AND name = ?",
1135 &[text(version_id), text(name)],
1136 )?
1137 .first(None)
1138 .await
1139 }
1140
1141 /// Changes what a version is named by and keeps about itself.
1142 pub async fn set_version(&self, version_id: &str, digest: &str, metadata: &str) -> Result<()> {
1143 self.prepare("UPDATE versions SET digest = ?, metadata = ? WHERE id = ?", &[text(digest), text(metadata), text(version_id)])?
1144 .run()
1145 .await?;
1146 Ok(())
1147 }
1148
1149 pub async fn set_checksums(&self, digest: &Digest, sums: &Checksums) -> Result<()> {
1150 self.prepare(
1151 "INSERT OR IGNORE INTO checksums (digest, md5, sha1, sha512) VALUES (?, ?, ?, ?)",
1152 &[text(digest.as_str()), text(&sums.md5), text(&sums.sha1), text(&sums.sha512)],
1153 )?
1154 .run()
1155 .await?;
1156 Ok(())
1157 }
1158
1159 pub async fn checksums(&self, digest: &Digest) -> Result<Option<Checksums>> {
1160 self.prepare("SELECT md5, sha1, sha512 FROM checksums WHERE digest = ?", &[text(digest.as_str())])?
1161 .first(None)
1162 .await
1163 }
1164
1165 /// Every version of a workspace's packages of an ecosystem, oldest
1166 /// first: what an index of the whole registry is made from.
1167 pub async fn ecosystem_versions(&self, workspace: &str, ecosystem: &str, limit: u32) -> Result<Vec<VersionRow>> {
1168 self.prepare(
1169 &format!(
1170 "SELECT {} FROM versions v JOIN packages p ON p.id = v.package_id
1171 WHERE p.workspace = ? AND p.ecosystem = ? AND p.workspace_deleted_at IS NULL
1172 ORDER BY v.published_at, v.id LIMIT {limit}",
1173 VERSION_COLUMNS.split(", ").map(|c| format!("v.{c}")).collect::<Vec<_>>().join(", ")
1174 ),
1175 &[text(workspace), text(ecosystem)],
1176 )?
1177 .all()
1178 .await?
1179 .results()
1180 }
1181
1182 /// A workspace's packages of an ecosystem, by name.
1183 pub async fn packages_of(&self, workspace: &str, ecosystem: &str, limit: u32) -> Result<Vec<PackageRow>> {
1184 self.prepare(
1185 &format!(
1186 "SELECT {PACKAGE_COLUMNS} FROM packages WHERE workspace = ? AND ecosystem = ? AND workspace_deleted_at IS NULL ORDER BY name LIMIT {limit}"
1187 ),
1188 &[text(workspace), text(ecosystem)],
1189 )?
1190 .all()
1191 .await?
1192 .results()
1193 }
1194
1195 /// A workspace's Maven artifacts of one groupId (`com.acme:*`), by
1196 /// name: those named from `com.acme:` up to `com.acme;`, the
1197 /// character after `:`.
1198 pub async fn maven_group(&self, workspace: &str, group: &str, limit: u32) -> Result<Vec<PackageRow>> {
1199 self.prepare(
1200 &format!(
1201 "SELECT {PACKAGE_COLUMNS} FROM packages WHERE workspace = ? AND ecosystem = 'maven' AND name >= ? AND name < ?
1202 AND workspace_deleted_at IS NULL ORDER BY name LIMIT {limit}"
1203 ),
1204 &[text(workspace), text(&format!("{group}:")), text(&format!("{group};"))],
1205 )?
1206 .all()
1207 .await?
1208 .results()
1209 }
1210
1211 pub async fn forget_blob(&self, digest: &str) -> Result<()> {
1212 let d = [text(digest)];
1213 self.db
1214 .batch(vec![
1215 self.prepare("DELETE FROM checksums WHERE digest = ?", &d)?,
1216 self.prepare("DELETE FROM package_blobs WHERE digest = ?", &d)?,
1217 self.prepare("DELETE FROM workspace_blobs WHERE digest = ?", &d)?,
1218 self.prepare("DELETE FROM blobs WHERE digest = ?", &d)?,
1219 ])
1220 .await?;
1221 Ok(())
1222 }
1223
1224 /// Workspaces with packages linked to the repository.
1225 pub async fn workspaces_linked_to(&self, repo_id: &str) -> Result<Vec<String>> {
1226 #[derive(Deserialize)]
1227 struct Ws {
1228 workspace: String,
1229 }
1230 let rows: Vec<Ws> = self
1231 .prepare("SELECT DISTINCT workspace FROM packages WHERE repo_id = ?", &[text(repo_id)])?
1232 .all()
1233 .await?
1234 .results()?;
1235 Ok(rows.into_iter().map(|row| row.workspace).collect())
1236 }
1237
1238 pub async fn follow_visibility(&self, repo_id: &str, private: bool) -> Result<()> {
1239 self.prepare(
1240 "UPDATE packages SET visibility = ? WHERE repo_id = ?",
1241 &[text(if private { "private" } else { "public" }), text(repo_id)],
1242 )?
1243 .run()
1244 .await?;
1245 Ok(())
1246 }
1247}