@pgplex/pgconsole 0.0.2 → 0.0.4

package/dist/server.mjs

@@ -1,3 +1,4 @@
+#!/usr/bin/env node
 import { createRequire } from 'module';
 const require = createRequire(import.meta.url);
 const __filename = fileURLToPath(import.meta.url);
@@ -41057,7 +41058,7 @@ async function loadConfig(configPath) {
   const path5 = configPath || "pgconsole.toml";
   if (!existsSync(path5)) {
     throw new Error(`Config file not found: ${path5}
-See https://docs.pgconsole.com/configuration/toml-config`);
+See https://docs.pgconsole.com/configuration/config`);
   }
   const content = readFileSync(path5, "utf-8");
   const parsed = parse2(content);
@@ -41374,7 +41375,7 @@ See https://docs.pgconsole.com/configuration/toml-config`);
     }
   }
   const iam = [];
-  const validPermissions = ["read", "write", "ddl", "admin"];
+  const validPermissions = ["read", "write", "ddl", "admin", "explain", "execute", "export"];
   const rawIAM = parsed.iam || [];
   for (let i2 = 0; i2 < rawIAM.length; i2++) {
     const rule = rawIAM[i2];
@@ -41394,10 +41395,13 @@ See https://docs.pgconsole.com/configuration/toml-config`);
       if (typeof perm !== "string") {
         throw new Error(`IAM rule ${ruleNum} has invalid permission: must be string`);
       }
-      if (!validPermissions.includes(perm)) {
-        throw new Error(`IAM rule ${ruleNum} has invalid permission: ${perm}. Must be one of: ${validPermissions.join(", ")}`);
+      if (perm === "allPermissions") {
+        permissions.push(...validPermissions);
+      } else if (!validPermissions.includes(perm)) {
+        throw new Error(`IAM rule ${ruleNum} has invalid permission: ${perm}. Must be one of: ${validPermissions.join(", ")}, allPermissions`);
+      } else {
+        permissions.push(perm);
       }
-      permissions.push(perm);
     }
     if (!Array.isArray(rule.members) || rule.members.length === 0) {
       throw new Error(`IAM rule ${ruleNum} missing required field: members (must be non-empty array)`);
@@ -41408,7 +41412,7 @@ See https://docs.pgconsole.com/configuration/toml-config`);
         throw new Error(`IAM rule ${ruleNum} has invalid member: must be non-empty string`);
       }
       const m2 = member.trim();
-      if (m2 === "allAuthenticatedUsers") {
+      if (m2 === "allUsers") {
         members.push(m2);
       } else if (m2.startsWith("user:")) {
         const email = m2.slice(5);
@@ -41426,7 +41430,7 @@ See https://docs.pgconsole.com/configuration/toml-config`);
         }
         members.push(m2);
       } else {
-        throw new Error(`IAM rule ${ruleNum} has invalid member format: ${m2}. Must be "allAuthenticatedUsers", "user:xxx", or "group:xxx"`);
+        throw new Error(`IAM rule ${ruleNum} has invalid member format: ${m2}. Must be "allUsers", "user:xxx", or "group:xxx"`);
       }
     }
     iam.push({ connection, permissions, members });
@@ -41451,13 +41455,6 @@ See https://docs.pgconsole.com/configuration/toml-config`);
       throw new Error(`Too many [[users]] entries: ${users.length} configured but current license only allows ${limit2}. Remove users or upgrade your license.`);
     }
   }
-  console.log(`Loaded ${users.length} user(s), ${groups.length} group(s), ${labels.length} label(s) and ${connections.length} connection(s) from ${path5}`);
-  if (ai) {
-    console.log(`AI configured with ${ai.providers.length} provider(s)`);
-  }
-  if (iam.length > 0) {
-    console.log(`IAM configured with ${iam.length} rule(s)`);
-  }
 }
 function getLabels() {
   return loadedConfig.labels;
@@ -57496,7 +57493,7 @@ function extractPostgresVersion(versionString) {
 }
 
 // server/lib/iam.ts
-var ALL_PERMISSIONS = ["read", "write", "ddl", "admin"];
+var ALL_PERMISSIONS = ["read", "write", "ddl", "admin", "explain", "execute", "export"];
 function requirePermission(user, connectionId, permission, action) {
   if (!user) {
     throw new ConnectError("Authentication required", Code.Unauthenticated);
@@ -57541,7 +57538,7 @@ function getUserPermissions(email, connectionId) {
       continue;
     }
     const matches = rule.members.some((member) => {
-      if (member === "allAuthenticatedUsers") {
+      if (member === "allUsers") {
         return true;
       }
       if (member.startsWith("user:")) {
@@ -57756,6 +57753,7 @@ function transformStatement(node, source) {
   if ("AlterPublicationStmt" in obj) return { kind: "alter_publication", source };
   if ("ReassignOwnedStmt" in obj) return { kind: "reassign_owned", source };
   if ("DropOwnedStmt" in obj) return { kind: "drop_owned", source };
+  if ("CallStmt" in obj) return { kind: "call", source };
   return { kind: "unknown", raw: node, source };
 }
 function transformSelect(raw) {
@@ -62077,9 +62075,14 @@ function getRequiredPermission(kind) {
   switch (kind) {
     // Read-only
     case "select":
-    case "explain":
     case "show":
       return "read";
+    // Explain
+    case "explain":
+      return "explain";
+    // Execute (stored procedures)
+    case "call":
+      return "execute";
     // DML (data modification)
     case "insert":
     case "update":
@@ -62104,7 +62107,7 @@ function getRequiredPermission(kind) {
     case "revoke":
     case "refresh_matview":
       return "ddl";
-    // COPY depends on direction
+    // COPY (data import/export via server filesystem)
     case "copy":
       return "write";
     // Session/transaction control - safe operations
@@ -92526,8 +92529,9 @@ app.use((req, res, next) => {
 async function start() {
   const args = parseArgs();
   const port = args.port || process.env.PORT || 9876;
+  const configPath = args.config || "pgconsole.toml";
   try {
-    await loadConfig(args.config);
+    await loadConfig(configPath);
   } catch (error) {
     console.error("Failed to load config:", error instanceof Error ? error.message : error);
     process.exit(1);
@@ -92545,9 +92549,40 @@ async function start() {
     console.error("\nConnection test failed:", error instanceof Error ? error.message : error);
     process.exit(1);
   }
-  app.listen(port, () => {
+  const server = app.listen(port, () => {
+    console.log(`
+                                                      ___
+                                                     /\\_ \\
+ _____      __     ___    ___     ___     ____    ___\\//\\ \\      __
+/\\ '__\`\\  /'_ \`\\  /'___\\ / __\`\\ /' _ \`\\  /',__\\  / __\`\\\\ \\ \\   /'__\`\\
+\\ \\ \\L\\ \\/\\ \\L\\ \\/\\ \\__//\\ \\L\\ \\/\\ \\/\\ \\/\\__, \`\\/\\ \\L\\ \\\\_\\ \\_/\\  __/
+ \\ \\ ,__/\\ \\____ \\ \\____\\ \\____/\\ \\_\\ \\_\\/\\____/\\ \\____//\\____\\ \\____\\
+  \\ \\ \\/  \\/___L\\ \\/____/\\/___/  \\/_/\\/_/\\/___/  \\/___/ \\/____/\\/____/
+   \\ \\_\\    /\\____/
+    \\/_/    \\_/__/
+
+    Version ${"0.0.4"}
+`);
     console.log(`Server running on http://localhost:${port}`);
+    const browserUrl = false ? `http://localhost:5173` : getExternalUrl() || `http://localhost:${port}`;
+    console.log(`Open in browser: ${browserUrl}`);
   });
+  server.on("error", (err) => {
+    if (err.code === "EADDRINUSE") {
+      console.error(`Error: Port ${port} is already in use.`);
+    } else {
+      console.error(`Error starting server: ${err.message}`);
+    }
+    process.exit(1);
+  });
+  const shutdown = () => {
+    console.log("\nShutting down...");
+    server.close(() => {
+      process.exit(0);
+    });
+  };
+  process.on("SIGTERM", shutdown);
+  process.on("SIGINT", shutdown);
 }
 start();
 /*! Bundled license information: