Replace the Node prototype (server.mjs) with the stack the merge plan calls for: Go 1.25, Gin for routing, GORM + MariaDB for persistence. Same wire contract on /api/sidecar/* so the SvelteKit client doesn't change. - Marks move from a JSON file on disk to mule_sidecar.marks (auto- migrated by GORM on first boot). The Node prototype's marks.json was dev-only; not migrated. - Folder/rename/heap-convert/duplicates handlers reproduce the prototype's behaviour, including the path-traversal defence (resolveUnderRoot + EvalSymlinks), the size-bucket prefilter for the duplicate hasher, and the background reindex fire-and-forget pattern. - Auth model unchanged: requireSession middleware proxies the caller's X-Auth-Token to PhotoPrism's /api/v1/photos?count=1 before any destructive op. - Expose pp-mariadb on 127.0.0.1:3306 in docker-compose so the host Go process can reach mule_sidecar.* without joining the container network. - Archive the Node prototype under sidecar/legacy/server.mjs for one cycle as reference. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
236 lines
6.4 KiB
Go
236 lines
6.4 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"io"
|
|
"log/slog"
|
|
"net/http"
|
|
"net/url"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
type heapConvertBody struct {
|
|
TargetFolder string `json:"targetFolder"`
|
|
Mode string `json:"mode"` // "move" or "copy"
|
|
Subfolder string `json:"subfolder"` // optional, sanitized to a single segment
|
|
DeleteHeap bool `json:"deleteHeap"`
|
|
}
|
|
|
|
type heapPhoto struct {
|
|
UID string `json:"UID"`
|
|
Files []ppFile `json:"Files"`
|
|
}
|
|
|
|
type heapErr struct {
|
|
UID string `json:"uid"`
|
|
Reason string `json:"reason"`
|
|
}
|
|
|
|
// copyFile is the os.Rename fallback for cross-device moves and the
|
|
// primary path for "copy" mode. Streams so a 4GB video doesn't pin
|
|
// memory; preserves mode bits, sets the modification time to now (we're
|
|
// creating a new inode either way).
|
|
func copyFile(src, dst string) error {
|
|
in, err := os.Open(src)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer in.Close()
|
|
st, err := in.Stat()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
out, err := os.OpenFile(dst, os.O_WRONLY|os.O_CREATE|os.O_EXCL, st.Mode())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if _, err := io.Copy(out, in); err != nil {
|
|
out.Close()
|
|
os.Remove(dst)
|
|
return err
|
|
}
|
|
return out.Close()
|
|
}
|
|
|
|
func handleHeapConvert(cfg *Config, pp *ppClient) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
token := ctxToken(c)
|
|
albumUID := c.Param("uid")
|
|
|
|
var body heapConvertBody
|
|
if err := c.ShouldBindJSON(&body); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "invalid json"})
|
|
return
|
|
}
|
|
mode := body.Mode
|
|
if mode != "copy" {
|
|
mode = "move"
|
|
}
|
|
deleteHeap := mode == "move" && body.DeleteHeap
|
|
|
|
var subfolder string
|
|
if body.Subfolder != "" {
|
|
s, ok := sanitizeFilename(body.Subfolder)
|
|
if !ok {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "invalid subfolder name"})
|
|
return
|
|
}
|
|
subfolder = s
|
|
}
|
|
|
|
// Resolve destination. resolveUnderRoot ensures the target lives
|
|
// inside ORIGINALS_ROOT and that its parent is a real directory.
|
|
targetAbs, err := resolveUnderRoot(cfg.OriginalsRoot, body.TargetFolder, true)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "invalid targetFolder"})
|
|
return
|
|
}
|
|
destAbs := targetAbs
|
|
if subfolder != "" {
|
|
destAbs = filepath.Join(targetAbs, subfolder)
|
|
if err := os.MkdirAll(destAbs, 0o755); err != nil {
|
|
c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
|
|
return
|
|
}
|
|
}
|
|
|
|
// Pull the heap's photos via the q=album:UID query. count=1000 covers
|
|
// every realistic heap; merged=true expands stacked variants so we
|
|
// move the JPG/HEIC sibling alongside the primary.
|
|
q := url.QueryEscape("album:" + albumUID)
|
|
listURL := "/api/v1/photos?q=" + q + "&count=1000&merged=true"
|
|
resp, err := pp.call(c.Request.Context(), http.MethodGet, listURL, token, nil)
|
|
if err != nil {
|
|
c.JSON(http.StatusBadGateway, gin.H{"error": err.Error()})
|
|
return
|
|
}
|
|
if !resp.OK {
|
|
c.JSON(resp.Status, gin.H{"error": "list photos failed"})
|
|
return
|
|
}
|
|
var photos []heapPhoto
|
|
if err := json.Unmarshal(resp.Body, &photos); err != nil {
|
|
c.JSON(http.StatusBadGateway, gin.H{"error": "decode photo list"})
|
|
return
|
|
}
|
|
|
|
sourceParents := map[string]struct{}{}
|
|
errs := []heapErr{}
|
|
moved, copied := 0, 0
|
|
|
|
for _, photo := range photos {
|
|
var file ppFile
|
|
found := false
|
|
for _, f := range photo.Files {
|
|
if f.Primary {
|
|
file, found = f, true
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
if len(photo.Files) == 0 {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: "no primary file"})
|
|
continue
|
|
}
|
|
file = photo.Files[0]
|
|
}
|
|
srcRel := file.Name
|
|
srcAbs := filepath.Join(cfg.OriginalsRoot, srcRel)
|
|
if !sameOrUnder(srcAbs, cfg.OriginalsRoot) {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: "path escapes originals"})
|
|
continue
|
|
}
|
|
st, err := os.Stat(srcAbs)
|
|
if err != nil || !st.Mode().IsRegular() {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: "file missing on disk"})
|
|
continue
|
|
}
|
|
if filepath.Dir(srcAbs) == destAbs {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: "already in target"})
|
|
continue
|
|
}
|
|
_, name, ok := uniqueName(destAbs, filepath.Base(srcAbs))
|
|
if !ok {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: "too many collisions"})
|
|
continue
|
|
}
|
|
dstAbs := filepath.Join(destAbs, name)
|
|
if mode == "move" {
|
|
if err := os.Rename(srcAbs, dstAbs); err != nil {
|
|
// Cross-device renames fail with EXDEV — fall back to
|
|
// copy+remove so a library that spans filesystems still
|
|
// works.
|
|
if err2 := copyFile(srcAbs, dstAbs); err2 != nil {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: err.Error()})
|
|
continue
|
|
}
|
|
if err2 := os.Remove(srcAbs); err2 != nil {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: "rename ok, source remove failed: " + err2.Error()})
|
|
continue
|
|
}
|
|
}
|
|
moved++
|
|
} else {
|
|
if err := copyFile(srcAbs, dstAbs); err != nil {
|
|
errs = append(errs, heapErr{UID: photo.UID, Reason: err.Error()})
|
|
continue
|
|
}
|
|
copied++
|
|
}
|
|
sourceParents[filepath.Dir(srcRel)] = struct{}{}
|
|
}
|
|
|
|
// Reindex the destination + every source parent so PhotoPrism's
|
|
// DB catches up. We do this in the background — the user gets
|
|
// their counts immediately; PhotoPrism's timeline updates as the
|
|
// reindex lands.
|
|
destRel, _ := filepath.Rel(cfg.OriginalsRoot, destAbs)
|
|
paths := map[string]struct{}{destRel: {}}
|
|
for p := range sourceParents {
|
|
paths[p] = struct{}{}
|
|
}
|
|
if subfolder != "" {
|
|
parent, _ := filepath.Rel(cfg.OriginalsRoot, targetAbs)
|
|
paths[parent] = struct{}{}
|
|
}
|
|
for p := range paths {
|
|
reindex := "/"
|
|
if p != "" && p != "." {
|
|
reindex = "/" + p
|
|
}
|
|
go fireReindex(cfg, pp, token, reindex)
|
|
}
|
|
|
|
heapDeleted := false
|
|
if deleteHeap {
|
|
r, err := pp.call(context.Background(), http.MethodDelete, "/api/v1/albums/"+albumUID, token, nil)
|
|
if err == nil && r.OK {
|
|
heapDeleted = true
|
|
} else if err != nil {
|
|
errs = append(errs, heapErr{UID: albumUID, Reason: "album delete: " + err.Error()})
|
|
} else {
|
|
errs = append(errs, heapErr{UID: albumUID, Reason: "album delete: HTTP " + itoa(r.Status)})
|
|
}
|
|
}
|
|
|
|
slog.Info("heap.convert",
|
|
"album", albumUID,
|
|
"mode", mode,
|
|
"moved", moved,
|
|
"copied", copied,
|
|
"errors", len(errs),
|
|
"heap_deleted", heapDeleted,
|
|
)
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"moved": moved,
|
|
"copied": copied,
|
|
"errors": errs,
|
|
"heap_deleted": heapDeleted,
|
|
})
|
|
}
|
|
}
|