Initial commit: Lookbook personal collection app

Pinterest-like app for saving images, videos, quotes, and embeds. Features: - Go backend with PostgreSQL, SSR templates - Console-based admin auth (login/logout via browser console) - Item types: images, videos (ffmpeg transcoding), quotes, embeds - Media stored as BLOBs in PostgreSQL - OpenGraph metadata extraction for links - Embed detection for YouTube, Vimeo, Twitter/X - Masonry grid layout, item detail pages - Tag system with filtering - Refresh metadata endpoint with change warnings - Replace media endpoint for updating item images/videos
2026-01-17 01:09:23 -05:00 · 2026-01-17 01:09:23 -05:00 · cdcc5b5293
commit cdcc5b5293
45 changed files with 4634 additions and 0 deletions
--- a/internal/data/admin/queries.go
+++ b/internal/data/admin/queries.go
@ -0,0 +1,41 @@
+package admin
+
+import (
+	"context"
+	"database/sql"
+	"time"
+)
+
+type Row struct {
+	ID           int
+	PasswordHash []byte // nil if not set
+	CreatedAt    time.Time
+}
+
+// QGet returns the single admin row.
+func QGet(ctx context.Context, db *sql.DB) (Row, error) {
+	query := `SELECT id, password_hash, created_at FROM admin WHERE id = 1`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query).Scan(
+		&row.ID,
+		&row.PasswordHash,
+		&row.CreatedAt,
+	)
+	return row, err
+}
+
+// QSetPassword sets the admin password hash.
+func QSetPassword(ctx context.Context, db *sql.DB, hash []byte) error {
+	query := `UPDATE admin SET password_hash = $1 WHERE id = 1`
+	_, err := db.ExecContext(ctx, query, hash)
+	return err
+}
+
+// QHasPassword returns true if a password has been set.
+func QHasPassword(ctx context.Context, db *sql.DB) (bool, error) {
+	query := `SELECT password_hash IS NOT NULL FROM admin WHERE id = 1`
+	var has bool
+	err := db.QueryRowContext(ctx, query).Scan(&has)
+	return has, err
+}
--- a/internal/data/item/queries.go
+++ b/internal/data/item/queries.go
@ -0,0 +1,219 @@
+package item
+
+import (
+	"context"
+	"database/sql"
+	"fmt"
+	"time"
+
+	"github.com/jackc/pgx/v5/pgtype"
+)
+
+type Row struct {
+	ID            int64
+	PubID         string
+	Title         *string
+	Description   *string
+	LinkURL       *string
+	ItemType      string // 'image', 'video', 'quote', 'embed'
+	EmbedProvider *string
+	EmbedVideoID  *string
+	EmbedHTML     *string
+	CreatedAt     time.Time
+	DeletedAt     *time.Time
+}
+
+type CreateParams struct {
+	Title         *string
+	Description   *string
+	LinkURL       *string
+	ItemType      string
+	EmbedProvider *string
+	EmbedVideoID  *string
+	EmbedHTML     *string
+}
+
+// QCreate creates a new item.
+func QCreate(ctx context.Context, db *sql.DB, p CreateParams) (Row, error) {
+	query := `
+		INSERT INTO item (title, description, link_url, item_type, embed_provider, embed_video_id, embed_html)
+		VALUES ($1, $2, $3, $4, $5, $6, $7)
+		RETURNING id, pub_id, title, description, link_url, item_type, embed_provider, embed_video_id, embed_html, created_at, deleted_at
+	`
+
+	var row Row
+	var pubID pgtype.UUID
+	err := db.QueryRowContext(ctx, query,
+		p.Title, p.Description, p.LinkURL, p.ItemType, p.EmbedProvider, p.EmbedVideoID, p.EmbedHTML,
+	).Scan(
+		&row.ID, &pubID, &row.Title, &row.Description, &row.LinkURL,
+		&row.ItemType, &row.EmbedProvider, &row.EmbedVideoID, &row.EmbedHTML,
+		&row.CreatedAt, &row.DeletedAt,
+	)
+	if err == nil {
+		row.PubID = formatUUID(pubID)
+	}
+	return row, err
+}
+
+// QFindByPubID finds an item by its public ID.
+func QFindByPubID(ctx context.Context, db *sql.DB, pubID string) (*Row, error) {
+	query := `
+		SELECT id, pub_id, title, description, link_url, item_type, embed_provider, embed_video_id, embed_html, created_at, deleted_at
+		FROM item
+		WHERE pub_id = $1
+	`
+
+	var row Row
+	var pubUUID pgtype.UUID
+	err := db.QueryRowContext(ctx, query, pubID).Scan(
+		&row.ID, &pubUUID, &row.Title, &row.Description, &row.LinkURL,
+		&row.ItemType, &row.EmbedProvider, &row.EmbedVideoID, &row.EmbedHTML,
+		&row.CreatedAt, &row.DeletedAt,
+	)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	row.PubID = formatUUID(pubUUID)
+	return &row, nil
+}
+
+// QFindByID finds an item by its internal ID.
+func QFindByID(ctx context.Context, db *sql.DB, id int64) (*Row, error) {
+	query := `
+		SELECT id, pub_id, title, description, link_url, item_type, embed_provider, embed_video_id, embed_html, created_at, deleted_at
+		FROM item
+		WHERE id = $1
+	`
+
+	var row Row
+	var pubUUID pgtype.UUID
+	err := db.QueryRowContext(ctx, query, id).Scan(
+		&row.ID, &pubUUID, &row.Title, &row.Description, &row.LinkURL,
+		&row.ItemType, &row.EmbedProvider, &row.EmbedVideoID, &row.EmbedHTML,
+		&row.CreatedAt, &row.DeletedAt,
+	)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	row.PubID = formatUUID(pubUUID)
+	return &row, nil
+}
+
+// QList returns all non-deleted items, newest first.
+func QList(ctx context.Context, db *sql.DB) ([]Row, error) {
+	query := `
+		SELECT id, pub_id, title, description, link_url, item_type, embed_provider, embed_video_id, embed_html, created_at, deleted_at
+		FROM item
+		WHERE deleted_at IS NULL
+		ORDER BY created_at DESC
+	`
+
+	rows, err := db.QueryContext(ctx, query)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var items []Row
+	for rows.Next() {
+		var row Row
+		var pubUUID pgtype.UUID
+		if err := rows.Scan(
+			&row.ID, &pubUUID, &row.Title, &row.Description, &row.LinkURL,
+			&row.ItemType, &row.EmbedProvider, &row.EmbedVideoID, &row.EmbedHTML,
+			&row.CreatedAt, &row.DeletedAt,
+		); err != nil {
+			return nil, err
+		}
+		row.PubID = formatUUID(pubUUID)
+		items = append(items, row)
+	}
+	return items, rows.Err()
+}
+
+// QListByTag returns all non-deleted items with a specific tag, newest first.
+func QListByTag(ctx context.Context, db *sql.DB, tagName string) ([]Row, error) {
+	query := `
+		SELECT i.id, i.pub_id, i.title, i.description, i.link_url, i.item_type, i.embed_provider, i.embed_video_id, i.embed_html, i.created_at, i.deleted_at
+		FROM item i
+		JOIN item_tag it ON i.id = it.item_id
+		JOIN tag t ON it.tag_id = t.id
+		WHERE i.deleted_at IS NULL AND t.name = $1
+		ORDER BY i.created_at DESC
+	`
+
+	rows, err := db.QueryContext(ctx, query, tagName)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var items []Row
+	for rows.Next() {
+		var row Row
+		var pubUUID pgtype.UUID
+		if err := rows.Scan(
+			&row.ID, &pubUUID, &row.Title, &row.Description, &row.LinkURL,
+			&row.ItemType, &row.EmbedProvider, &row.EmbedVideoID, &row.EmbedHTML,
+			&row.CreatedAt, &row.DeletedAt,
+		); err != nil {
+			return nil, err
+		}
+		row.PubID = formatUUID(pubUUID)
+		items = append(items, row)
+	}
+	return items, rows.Err()
+}
+
+type UpdateParams struct {
+	Title       *string
+	Description *string
+	LinkURL     *string
+}
+
+// QUpdate updates an item's editable fields.
+func QUpdate(ctx context.Context, db *sql.DB, id int64, p UpdateParams) error {
+	query := `
+		UPDATE item
+		SET title = $2, description = $3, link_url = $4
+		WHERE id = $1
+	`
+	_, err := db.ExecContext(ctx, query, id, p.Title, p.Description, p.LinkURL)
+	return err
+}
+
+// QUpdateType updates an item's type.
+func QUpdateType(ctx context.Context, db *sql.DB, id int64, itemType string) error {
+	query := `UPDATE item SET item_type = $2 WHERE id = $1`
+	_, err := db.ExecContext(ctx, query, id, itemType)
+	return err
+}
+
+// QSoftDelete soft deletes an item.
+func QSoftDelete(ctx context.Context, db *sql.DB, id int64) error {
+	query := `UPDATE item SET deleted_at = NOW() WHERE id = $1`
+	_, err := db.ExecContext(ctx, query, id)
+	return err
+}
+
+// QRestore restores a soft-deleted item.
+func QRestore(ctx context.Context, db *sql.DB, id int64) error {
+	query := `UPDATE item SET deleted_at = NULL WHERE id = $1`
+	_, err := db.ExecContext(ctx, query, id)
+	return err
+}
+
+func formatUUID(u pgtype.UUID) string {
+	if !u.Valid {
+		return ""
+	}
+	b := u.Bytes
+	return fmt.Sprintf("%x-%x-%x-%x-%x", b[0:4], b[4:6], b[6:8], b[8:10], b[10:16])
+}
--- a/internal/data/media/queries.go
+++ b/internal/data/media/queries.go
@ -0,0 +1,158 @@
+package media
+
+import (
+	"context"
+	"database/sql"
+	"time"
+)
+
+type Row struct {
+	ID          int64
+	ItemID      int64
+	MediaType   string // 'original', 'thumbnail'
+	ContentType string // MIME type
+	Data        []byte
+	Width       *int
+	Height      *int
+	SourceURL   *string // Original URL the media was fetched from
+	CreatedAt   time.Time
+}
+
+type CreateParams struct {
+	ItemID      int64
+	MediaType   string
+	ContentType string
+	Data        []byte
+	Width       *int
+	Height      *int
+	SourceURL   *string
+}
+
+// QCreate creates a new media record.
+func QCreate(ctx context.Context, db *sql.DB, p CreateParams) (Row, error) {
+	query := `
+		INSERT INTO media (item_id, media_type, content_type, data, width, height, source_url)
+		VALUES ($1, $2, $3, $4, $5, $6, $7)
+		RETURNING id, item_id, media_type, content_type, data, width, height, source_url, created_at
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query,
+		p.ItemID, p.MediaType, p.ContentType, p.Data, p.Width, p.Height, p.SourceURL,
+	).Scan(
+		&row.ID, &row.ItemID, &row.MediaType, &row.ContentType, &row.Data,
+		&row.Width, &row.Height, &row.SourceURL, &row.CreatedAt,
+	)
+	return row, err
+}
+
+// QFindByID finds a media record by ID.
+func QFindByID(ctx context.Context, db *sql.DB, id int64) (*Row, error) {
+	query := `
+		SELECT id, item_id, media_type, content_type, data, width, height, source_url, created_at
+		FROM media
+		WHERE id = $1
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, id).Scan(
+		&row.ID, &row.ItemID, &row.MediaType, &row.ContentType, &row.Data,
+		&row.Width, &row.Height, &row.SourceURL, &row.CreatedAt,
+	)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &row, nil
+}
+
+// QFindByItemID finds all media for an item.
+func QFindByItemID(ctx context.Context, db *sql.DB, itemID int64) ([]Row, error) {
+	query := `
+		SELECT id, item_id, media_type, content_type, data, width, height, source_url, created_at
+		FROM media
+		WHERE item_id = $1
+		ORDER BY media_type ASC
+	`
+
+	rows, err := db.QueryContext(ctx, query, itemID)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var media []Row
+	for rows.Next() {
+		var row Row
+		if err := rows.Scan(
+			&row.ID, &row.ItemID, &row.MediaType, &row.ContentType, &row.Data,
+			&row.Width, &row.Height, &row.SourceURL, &row.CreatedAt,
+		); err != nil {
+			return nil, err
+		}
+		media = append(media, row)
+	}
+	return media, rows.Err()
+}
+
+// QFindThumbnailByItemID finds the thumbnail for an item.
+func QFindThumbnailByItemID(ctx context.Context, db *sql.DB, itemID int64) (*Row, error) {
+	query := `
+		SELECT id, item_id, media_type, content_type, data, width, height, source_url, created_at
+		FROM media
+		WHERE item_id = $1 AND media_type = 'thumbnail'
+		LIMIT 1
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, itemID).Scan(
+		&row.ID, &row.ItemID, &row.MediaType, &row.ContentType, &row.Data,
+		&row.Width, &row.Height, &row.SourceURL, &row.CreatedAt,
+	)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &row, nil
+}
+
+// QFindOriginalByItemID finds the original media for an item.
+func QFindOriginalByItemID(ctx context.Context, db *sql.DB, itemID int64) (*Row, error) {
+	query := `
+		SELECT id, item_id, media_type, content_type, data, width, height, source_url, created_at
+		FROM media
+		WHERE item_id = $1 AND media_type = 'original'
+		LIMIT 1
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, itemID).Scan(
+		&row.ID, &row.ItemID, &row.MediaType, &row.ContentType, &row.Data,
+		&row.Width, &row.Height, &row.SourceURL, &row.CreatedAt,
+	)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &row, nil
+}
+
+// QDelete deletes a media record by ID.
+func QDelete(ctx context.Context, db *sql.DB, id int64) error {
+	query := `DELETE FROM media WHERE id = $1`
+	_, err := db.ExecContext(ctx, query, id)
+	return err
+}
+
+// QDeleteByItemID deletes all media for an item.
+func QDeleteByItemID(ctx context.Context, db *sql.DB, itemID int64) error {
+	query := `DELETE FROM media WHERE item_id = $1`
+	_, err := db.ExecContext(ctx, query, itemID)
+	return err
+}
--- a/internal/data/session/queries.go
+++ b/internal/data/session/queries.go
@ -0,0 +1,73 @@
+package session
+
+import (
+	"context"
+	"database/sql"
+	"time"
+)
+
+type Row struct {
+	ID        int64
+	SessionID string
+	CreatedAt time.Time
+	ExpiresAt time.Time
+}
+
+// QCreate creates a new session.
+func QCreate(ctx context.Context, db *sql.DB, sessionID string, expiresAt time.Time) (Row, error) {
+	query := `
+		INSERT INTO session (session_id, expires_at)
+		VALUES ($1, $2)
+		RETURNING id, session_id, created_at, expires_at
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, sessionID, expiresAt).Scan(
+		&row.ID,
+		&row.SessionID,
+		&row.CreatedAt,
+		&row.ExpiresAt,
+	)
+	return row, err
+}
+
+// QFindBySessionID finds a session by its session ID.
+// Returns (nil, nil) if the session does not exist.
+func QFindBySessionID(ctx context.Context, db *sql.DB, sessionID string) (*Row, error) {
+	query := `
+		SELECT id, session_id, created_at, expires_at
+		FROM session
+		WHERE session_id = $1
+		LIMIT 1
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, sessionID).Scan(
+		&row.ID,
+		&row.SessionID,
+		&row.CreatedAt,
+		&row.ExpiresAt,
+	)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	return &row, nil
+}
+
+// QDelete deletes a session by its session ID.
+func QDelete(ctx context.Context, db *sql.DB, sessionID string) error {
+	query := `DELETE FROM session WHERE session_id = $1`
+	_, err := db.ExecContext(ctx, query, sessionID)
+	return err
+}
+
+// QDeleteExpired deletes all expired sessions.
+func QDeleteExpired(ctx context.Context, db *sql.DB) error {
+	query := `DELETE FROM session WHERE expires_at < NOW()`
+	_, err := db.ExecContext(ctx, query)
+	return err
+}
--- a/internal/data/tag/queries.go
+++ b/internal/data/tag/queries.go
@ -0,0 +1,153 @@
+package tag
+
+import (
+	"context"
+	"database/sql"
+)
+
+type Row struct {
+	ID   int64
+	Name string
+}
+
+// QFindOrCreate finds a tag by name or creates it if it doesn't exist.
+func QFindOrCreate(ctx context.Context, db *sql.DB, name string) (Row, error) {
+	query := `
+		INSERT INTO tag (name)
+		VALUES ($1)
+		ON CONFLICT (name) DO UPDATE SET name = EXCLUDED.name
+		RETURNING id, name
+	`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, name).Scan(&row.ID, &row.Name)
+	return row, err
+}
+
+// QFindByName finds a tag by name.
+func QFindByName(ctx context.Context, db *sql.DB, name string) (*Row, error) {
+	query := `SELECT id, name FROM tag WHERE name = $1`
+
+	var row Row
+	err := db.QueryRowContext(ctx, query, name).Scan(&row.ID, &row.Name)
+	if err == sql.ErrNoRows {
+		return nil, nil
+	}
+	if err != nil {
+		return nil, err
+	}
+	return &row, nil
+}
+
+// QList returns all tags ordered by name.
+func QList(ctx context.Context, db *sql.DB) ([]Row, error) {
+	query := `SELECT id, name FROM tag ORDER BY name ASC`
+
+	rows, err := db.QueryContext(ctx, query)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var tags []Row
+	for rows.Next() {
+		var row Row
+		if err := rows.Scan(&row.ID, &row.Name); err != nil {
+			return nil, err
+		}
+		tags = append(tags, row)
+	}
+	return tags, rows.Err()
+}
+
+// QSuggest returns tags matching a prefix.
+func QSuggest(ctx context.Context, db *sql.DB, prefix string, limit int) ([]Row, error) {
+	query := `
+		SELECT id, name FROM tag
+		WHERE name ILIKE $1 || '%'
+		ORDER BY name ASC
+		LIMIT $2
+	`
+
+	rows, err := db.QueryContext(ctx, query, prefix, limit)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var tags []Row
+	for rows.Next() {
+		var row Row
+		if err := rows.Scan(&row.ID, &row.Name); err != nil {
+			return nil, err
+		}
+		tags = append(tags, row)
+	}
+	return tags, rows.Err()
+}
+
+// QTagsForItem returns all tags for an item.
+func QTagsForItem(ctx context.Context, db *sql.DB, itemID int64) ([]Row, error) {
+	query := `
+		SELECT t.id, t.name
+		FROM tag t
+		JOIN item_tag it ON t.id = it.tag_id
+		WHERE it.item_id = $1
+		ORDER BY t.name ASC
+	`
+
+	rows, err := db.QueryContext(ctx, query, itemID)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var tags []Row
+	for rows.Next() {
+		var row Row
+		if err := rows.Scan(&row.ID, &row.Name); err != nil {
+			return nil, err
+		}
+		tags = append(tags, row)
+	}
+	return tags, rows.Err()
+}
+
+// QAddTagToItem adds a tag to an item.
+func QAddTagToItem(ctx context.Context, db *sql.DB, itemID, tagID int64) error {
+	query := `
+		INSERT INTO item_tag (item_id, tag_id)
+		VALUES ($1, $2)
+		ON CONFLICT DO NOTHING
+	`
+	_, err := db.ExecContext(ctx, query, itemID, tagID)
+	return err
+}
+
+// QRemoveTagFromItem removes a tag from an item.
+func QRemoveTagFromItem(ctx context.Context, db *sql.DB, itemID, tagID int64) error {
+	query := `DELETE FROM item_tag WHERE item_id = $1 AND tag_id = $2`
+	_, err := db.ExecContext(ctx, query, itemID, tagID)
+	return err
+}
+
+// QSetTagsForItem replaces all tags for an item with the given tag names.
+func QSetTagsForItem(ctx context.Context, db *sql.DB, itemID int64, tagNames []string) error {
+	// Delete existing tags
+	_, err := db.ExecContext(ctx, `DELETE FROM item_tag WHERE item_id = $1`, itemID)
+	if err != nil {
+		return err
+	}
+
+	// Add new tags
+	for _, name := range tagNames {
+		tag, err := QFindOrCreate(ctx, db, name)
+		if err != nil {
+			return err
+		}
+		if err := QAddTagToItem(ctx, db, itemID, tag.ID); err != nil {
+			return err
+		}
+	}
+	return nil
+}