Files
veola/internal/models/models.go
prosolis feea126c5e Add per-user item ownership and isolation
Items are now private to their owner. Add items.user_id (migrated in
place, existing items backfilled to the first admin) and scope every
item, results, and dashboard view to the signed-in user via owner-scoped
queries plus an ownedItem 404 guard. Admins get strict isolation too;
elevation stays limited to settings and user management.

Alert routing follows ownership: deal emails go only to the item owner
and the weekly digest is built per-recipient from their own items. The
scheduler still polls every active item; the Apify/eBay budget stays a
shared pool visible to all.

Add TestItemsArePrivatePerUser and seed owners in db tests.
2026-06-20 13:39:19 -07:00

143 lines
3.5 KiB
Go

package models
import (
"strings"
"time"
)
type Role string
const (
RoleAdmin Role = "admin"
RoleUser Role = "user"
)
type User struct {
ID int64
Username string
PasswordHash string
Role Role
// Email is the address Resend mail is sent to and the identity key used
// to match a forward-auth (Authentik) identity to a local row. Optional
// for password-login users.
Email string
// AuthSource is "local" (password) or "forward" (Traefik forward-auth).
AuthSource string
EmailDealAlerts bool
EmailWeeklyDigest bool
CreatedAt time.Time
}
type Item struct {
ID int64
UserID int64
Name string
SearchQuery string
URL string
Category string
TargetPrice *float64
NtfyTopic string
NtfyPriority string
PollIntervalMinutes int
IncludeOutOfStock bool
MinPrice *float64
ExcludeKeywords string
Marketplaces []string
ListingType string
// Condition and Region are eBay-only search filters. Condition is
// Veola's vocabulary ("new", "used", "refurbished", "parts"); Region is
// an ISO 3166-1 alpha-2 country code constraining item location. Both
// empty means no filter, and both are ignored for non-eBay marketplaces.
Condition string
Region string
ActorActive string
ActorSold string
ActorPriceCompare string
UsePriceComparison bool
Active bool
LastPolledAt *time.Time
LastPollError string
BestPrice *float64
BestPriceCurrency string
BestPriceStore string
BestPriceURL string
BestPriceImageURL string
BestPriceTitle string
CreatedAt time.Time
UpdatedAt time.Time
}
type Result struct {
ID int64
ItemID int64
Title string
Price *float64
Currency string
URL string
Source string
ImageURL string
MatchedQuery string
Alerted bool
FoundAt time.Time
// EndsAt is populated for auction-format listings (eBay auctions,
// Yahoo Auctions JP). Nil for fixed-price listings and for any source
// that doesn't report an end time.
EndsAt *time.Time
}
// SearchQueries returns the item's alias list. Splits on newline, comma, and
// semicolon; trims; drops blanks; dedupes case-insensitively. Result order is
// the user's input order (first occurrence wins).
func (it *Item) SearchQueries() []string {
return SplitList(it.SearchQuery, 10)
}
// ExcludeKeywordsList returns the item's exclude-keyword list, normalized the
// same way as SearchQueries.
func (it *Item) ExcludeKeywordsList() []string {
return SplitList(it.ExcludeKeywords, 20)
}
// SplitList splits a user-entered list on newline, comma, or semicolon,
// trims whitespace, drops empty entries, dedupes case-insensitively, and caps
// the result at max entries (0 = no cap).
func SplitList(s string, max int) []string {
if s == "" {
return nil
}
seen := map[string]bool{}
var out []string
for _, part := range strings.FieldsFunc(s, func(r rune) bool {
return r == '\n' || r == '\r' || r == ',' || r == ';'
}) {
t := strings.TrimSpace(part)
if t == "" {
continue
}
k := strings.ToLower(t)
if seen[k] {
continue
}
seen[k] = true
out = append(out, t)
if max > 0 && len(out) >= max {
break
}
}
return out
}
type PricePoint struct {
ID int64
ItemID int64
Price float64
Store string
PolledAt time.Time
}
type Setting struct {
Key string
Value string
UpdatedAt time.Time
}