@zintrust/core 0.1.41 → 0.1.43

package/src/proxy/StatementRegistryResolver.d.ts

@@ -0,0 +1,15 @@
+import type { ProxyResponse } from './ProxyBackend';
+export type ResolvedStatement = Readonly<{
+    statementId: string;
+    sql: string;
+    params: unknown[];
+    mutating: boolean;
+}>;
+export declare const resolveStatementOrError: (statements: Record<string, string> | undefined, payload: Record<string, unknown>) => {
+    ok: true;
+    value: ResolvedStatement;
+} | {
+    ok: false;
+    response: ProxyResponse;
+};
+//# sourceMappingURL=StatementRegistryResolver.d.ts.map

package/src/proxy/StatementRegistryResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StatementRegistryResolver.d.ts","sourceRoot":"","sources":["../../../src/proxy/StatementRegistryResolver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC,CAAC;AAEH,eAAO,MAAM,uBAAuB,GAClC,YAAY,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC9C,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAA;CAqC/E,CAAC"}

package/src/proxy/StatementRegistryResolver.js

@@ -0,0 +1,34 @@
+import { ErrorHandler } from './ErrorHandler.js';
+import { validateStatementPayload } from './StatementPayloadValidator.js';
+import { isMutatingSql } from './isMutatingSql.js';
+export const resolveStatementOrError = (statements, payload) => {
+    if (!statements) {
+        return {
+            ok: false,
+            response: ErrorHandler.toProxyError(400, 'CONFIG_ERROR', 'Missing statement registry'),
+        };
+    }
+    const stmtValidation = validateStatementPayload(payload);
+    if (!stmtValidation.valid) {
+        return {
+            ok: false,
+            response: ErrorHandler.toProxyError(400, stmtValidation.error.code, stmtValidation.error.message),
+        };
+    }
+    const sql = statements[stmtValidation.statementId];
+    if (typeof sql !== 'string' || sql.trim() === '') {
+        return {
+            ok: false,
+            response: ErrorHandler.toProxyError(404, 'NOT_FOUND', 'Unknown statementId'),
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            statementId: stmtValidation.statementId,
+            sql,
+            params: stmtValidation.params,
+            mutating: isMutatingSql(sql),
+        },
+    };
+};

package/src/proxy/d1/ZintrustD1Proxy.d.ts

@@ -1,2 +1,3 @@
-export { _ZINTRUST_CLOUDFLARE_D1_PROXY_BUILD_DATE, _ZINTRUST_CLOUDFLARE_D1_PROXY_VERSION, ZintrustD1Proxy, } from '../../../packages/cloudflare-d1-proxy/src/index.js';
+export { ZintrustD1Proxy } from '../../../packages/cloudflare-d1-proxy/src/index.js';
+export { default } from '../../../packages/cloudflare-d1-proxy/src/index.js';
 //# sourceMappingURL=ZintrustD1Proxy.d.ts.map

package/src/proxy/d1/ZintrustD1Proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ZintrustD1Proxy.d.ts","sourceRoot":"","sources":["../../../../src/proxy/d1/ZintrustD1Proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wCAAwC,EACxC,qCAAqC,EACrC,eAAe,GAChB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"ZintrustD1Proxy.d.ts","sourceRoot":"","sources":["../../../../src/proxy/d1/ZintrustD1Proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC"}

package/src/proxy/d1/ZintrustD1Proxy.js

@@ -1 +1,2 @@
-export { _ZINTRUST_CLOUDFLARE_D1_PROXY_BUILD_DATE, _ZINTRUST_CLOUDFLARE_D1_PROXY_VERSION, ZintrustD1Proxy, } from '../../../packages/cloudflare-d1-proxy/src/index.js';
+export { ZintrustD1Proxy } from '../../../packages/cloudflare-d1-proxy/src/index.js';
+export { default } from '../../../packages/cloudflare-d1-proxy/src/index.js';

package/src/proxy/isMutatingSql.d.ts

@@ -0,0 +1,2 @@
+export declare const isMutatingSql: (sql: string) => boolean;
+//# sourceMappingURL=isMutatingSql.d.ts.map

package/src/proxy/isMutatingSql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isMutatingSql.d.ts","sourceRoot":"","sources":["../../../src/proxy/isMutatingSql.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,KAAG,OAa3C,CAAC"}

package/src/proxy/isMutatingSql.js

@@ -0,0 +1,12 @@
+export const isMutatingSql = (sql) => {
+    const s = sql.trimStart().toLowerCase();
+    return (s.startsWith('insert') ||
+        s.startsWith('update') ||
+        s.startsWith('delete') ||
+        s.startsWith('merge') ||
+        s.startsWith('create') ||
+        s.startsWith('drop') ||
+        s.startsWith('alter') ||
+        s.startsWith('replace') ||
+        s.startsWith('truncate'));
+};

package/src/proxy/kv/ZintrustKvProxy.d.ts

@@ -1,2 +1,3 @@
-export { _ZINTRUST_CLOUDFLARE_KV_PROXY_BUILD_DATE, _ZINTRUST_CLOUDFLARE_KV_PROXY_VERSION, ZintrustKvProxy, } from '../../../packages/cloudflare-kv-proxy/src/index.js';
+export { ZintrustKvProxy } from '../../../packages/cloudflare-kv-proxy/src/index.js';
+export { default } from '../../../packages/cloudflare-kv-proxy/src/index.js';
 //# sourceMappingURL=ZintrustKvProxy.d.ts.map

package/src/proxy/kv/ZintrustKvProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ZintrustKvProxy.d.ts","sourceRoot":"","sources":["../../../../src/proxy/kv/ZintrustKvProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wCAAwC,EACxC,qCAAqC,EACrC,eAAe,GAChB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"ZintrustKvProxy.d.ts","sourceRoot":"","sources":["../../../../src/proxy/kv/ZintrustKvProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC"}

package/src/proxy/kv/ZintrustKvProxy.js

@@ -1 +1,2 @@
-export { _ZINTRUST_CLOUDFLARE_KV_PROXY_BUILD_DATE, _ZINTRUST_CLOUDFLARE_KV_PROXY_VERSION, ZintrustKvProxy, } from '../../../packages/cloudflare-kv-proxy/src/index.js';
+export { ZintrustKvProxy } from '../../../packages/cloudflare-kv-proxy/src/index.js';
+export { default } from '../../../packages/cloudflare-kv-proxy/src/index.js';

package/src/proxy/mysql/MySqlProxyServer.d.ts

@@ -1,12 +1,6 @@
 import { type BaseProxyOverrides } from '../ProxyServerUtils';
-type ProxyOverrides = BaseProxyOverrides & Partial<{
-    dbHost: string;
-    dbPort: number;
-    dbName: string;
-    dbUser: string;
-    dbPass: string;
-    connectionLimit: number;
-}>;
+import type { SqlProxyDatabaseOverrides } from '../SqlProxyDbOverrides';
+type ProxyOverrides = BaseProxyOverrides & SqlProxyDatabaseOverrides;
 export declare const MySqlProxyServer: Readonly<{
     start(overrides?: ProxyOverrides): Promise<void>;
 }>;

package/src/proxy/mysql/MySqlProxyServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MySqlProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/mysql/MySqlProxyServer.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAajC,KAAK,cAAc,GAAG,kBAAkB,GACtC,OAAO,CAAC;IACN,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAyJL,eAAO,MAAM,gBAAgB;sBACJ,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EA4C1D,CAAC;AAEH,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"MySqlProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/mysql/MySqlProxyServer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAa5E,KAAK,cAAc,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;AAkNrE,eAAO,MAAM,gBAAgB;sBACJ,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EA4C1D,CAAC;AAEH,eAAe,gBAAgB,CAAC"}

package/src/proxy/mysql/MySqlProxyServer.js

@@ -1,25 +1,19 @@
-import { Env } from '../../config/env.js';
-import { Logger } from '../../config/logger.js';
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
-import { ErrorHandler } from '../ErrorHandler.js';
-import { createProxyServer } from '../ProxyServer.js';
-import { resolveBaseConfig, resolveBaseSigningConfig, verifyRequestSignature, } from '../ProxyServerUtils.js';
-import { RequestValidator } from '../RequestValidator.js';
-import { validateSqlPayload } from '../SqlPayloadValidator.js';
+import * as Deps from '../SqlProxyServerDeps.js';
 import { createPool } from 'mysql2/promise';
 const resolveDatabaseConfig = (overrides = {}) => {
-    const dbHost = overrides.dbHost ?? Env.get('MYSQL_DB_HOST', Env.get('DB_HOST', '127.0.0.1'));
-    const dbPort = overrides.dbPort ?? Env.getInt('MYSQL_DB_PORT', Env.getInt('DB_PORT', 3306));
-    const dbName = overrides.dbName ?? Env.get('MYSQL_DB_DATABASE', Env.get('DB_DATABASE', 'zintrust'));
-    const dbUser = overrides.dbUser ?? Env.get('MYSQL_DB_USERNAME', Env.get('DB_USERNAME', 'root'));
-    const dbPass = overrides.dbPass ?? Env.get('MYSQL_DB_PASSWORD', Env.get('DB_PASSWORD', 'pass'));
-    const connectionLimit = overrides.connectionLimit ?? Env.MYSQL_PROXY_POOL_LIMIT;
+    const dbHost = overrides.dbHost ?? Deps.Env.get('MYSQL_DB_HOST', Deps.Env.get('DB_HOST', '127.0.0.1'));
+    const dbPort = overrides.dbPort ?? Deps.Env.getInt('MYSQL_DB_PORT', Deps.Env.getInt('DB_PORT', 3306));
+    const dbName = overrides.dbName ?? Deps.Env.get('MYSQL_DB_DATABASE', Deps.Env.get('DB_DATABASE', 'zintrust'));
+    const dbUser = overrides.dbUser ?? Deps.Env.get('MYSQL_DB_USERNAME', Deps.Env.get('DB_USERNAME', 'root'));
+    const dbPass = overrides.dbPass ?? Deps.Env.get('MYSQL_DB_PASSWORD', Deps.Env.get('DB_PASSWORD', 'pass'));
+    const connectionLimit = overrides.connectionLimit ?? Deps.Env.MYSQL_PROXY_POOL_LIMIT;
     return { dbHost, dbPort, dbName, dbUser, dbPass, connectionLimit };
 };
 const resolveConfig = (overrides = {}) => {
-    const proxyConfig = resolveBaseConfig(overrides, 'MYSQL');
+    const proxyConfig = Deps.resolveBaseConfig(overrides, 'MYSQL');
     const dbConfig = resolveDatabaseConfig(overrides);
-    const signingConfig = resolveBaseSigningConfig(overrides, 'MYSQL');
+    const signingConfig = Deps.resolveBaseSigningConfig(overrides, 'MYSQL');
     const poolOptions = {
         host: dbConfig.dbHost,
         port: dbConfig.dbPort,
@@ -44,6 +38,7 @@ const resolveConfig = (overrides = {}) => {
             require: signingConfig.requireSigning,
             windowMs: signingConfig.signingWindowMs,
         },
+        statements: Deps.loadStatementRegistry('MYSQL'),
     };
 };
 const normalizeResult = (rows) => {
@@ -81,40 +76,78 @@ const handleEndpoint = (path, rows) => {
             },
         };
     }
-    return ErrorHandler.toProxyError(404, 'NOT_FOUND', 'Unknown endpoint');
+    return Deps.ErrorHandler.toProxyError(404, 'NOT_FOUND', 'Unknown endpoint');
 };
-const createBackend = (pool) => ({
+const handleStatementRequest = async (params) => {
+    const resolved = Deps.resolveStatementOrError(params.statements, params.payload);
+    if (!resolved.ok)
+        return resolved.response;
+    try {
+        const [rows] = await params.pool.query(resolved.value.sql, resolved.value.params);
+        const normalized = normalizeResult(rows);
+        if (!resolved.value.mutating) {
+            return { status: 200, body: { rows: normalized.rows, rowCount: normalized.rowCount } };
+        }
+        return {
+            status: 200,
+            body: {
+                ok: true,
+                meta: { changes: normalized.rowCount, lastRowId: normalized.lastInsertId },
+            },
+        };
+    }
+    catch (error) {
+        Deps.Logger.error('[MySQLProxyServer] Statement execution failed', {
+            path: params.request.path,
+            statementId: resolved.value.statementId,
+            mutating: resolved.value.mutating,
+            paramsCount: resolved.value.params.length,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return Deps.ErrorHandler.toProxyError(500, 'MYSQL_ERROR', String(error));
+    }
+};
+const handleSqlRequest = async (params) => {
+    const sqlValidation = Deps.validateSqlPayload(params.payload);
+    if (!sqlValidation.valid) {
+        const error = sqlValidation.error ?? {
+            code: 'VALIDATION_ERROR',
+            message: 'Invalid SQL payload',
+        };
+        return Deps.ErrorHandler.toProxyError(400, error.code, error.message);
+    }
+    try {
+        const [rows] = await params.pool.query(sqlValidation.sql ?? '', sqlValidation.params ?? []);
+        return handleEndpoint(params.request.path, rows);
+    }
+    catch (error) {
+        Deps.Logger.error('[MySQLProxyServer] Query execution failed', {
+            path: params.request.path,
+            sqlPreview: String(sqlValidation.sql ?? '').slice(0, 160),
+            paramsCount: Array.isArray(sqlValidation.params) ? sqlValidation.params.length : 0,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return Deps.ErrorHandler.toProxyError(500, 'MYSQL_ERROR', String(error));
+    }
+};
+const createBackend = (pool, statements) => ({
     name: 'mysql',
     async handle(request) {
-        const methodError = RequestValidator.requirePost(request.method);
-        if (methodError) {
-            return ErrorHandler.toProxyError(405, methodError.code, methodError.message);
-        }
-        const parsed = RequestValidator.parseJson(request.body);
-        if (!parsed.ok) {
-            return ErrorHandler.toProxyError(400, parsed.error.code, parsed.error.message);
-        }
-        const sqlValidation = validateSqlPayload(parsed.value);
-        if (!sqlValidation.valid) {
-            const error = sqlValidation.error ?? {
-                code: 'VALIDATION_ERROR',
-                message: 'Invalid SQL payload',
-            };
-            return ErrorHandler.toProxyError(400, error.code, error.message);
-        }
-        try {
-            const [rows] = await pool.query(sqlValidation.sql ?? '', sqlValidation.params ?? []);
-            return handleEndpoint(request.path, rows);
-        }
-        catch (error) {
-            Logger.error('[MySQLProxyServer] Query execution failed', {
-                path: request.path,
-                sqlPreview: String(sqlValidation.sql ?? '').slice(0, 160),
-                paramsCount: Array.isArray(sqlValidation.params) ? sqlValidation.params.length : 0,
-                error: error instanceof Error ? error.message : String(error),
+        const validationError = Deps.validateProxyRequest(request);
+        if (validationError !== null)
+            return validationError;
+        const parsed = Deps.parseJsonBody(request.body);
+        if ('status' in parsed)
+            return parsed;
+        if (request.path === '/zin/mysql/statement') {
+            return handleStatementRequest({
+                pool,
+                statements,
+                request,
+                payload: parsed.value,
             });
-            return ErrorHandler.toProxyError(500, 'MYSQL_ERROR', String(error));
         }
+        return handleSqlRequest({ pool, request, payload: parsed.value });
     },
     async health() {
         try {
@@ -122,10 +155,10 @@ const createBackend = (pool) => ({
             return { status: 200, body: { status: 'healthy' } };
         }
         catch (error) {
-            Logger.error('[MySQLProxyServer] Health check failed', {
+            Deps.Logger.error('[MySQLProxyServer] Health check failed', {
                 error: error instanceof Error ? error.message : String(error),
             });
-            return ErrorHandler.toProxyError(503, 'UNHEALTHY', String(error));
+            return Deps.ErrorHandler.toProxyError(503, 'UNHEALTHY', String(error));
         }
     },
 });
@@ -142,20 +175,20 @@ export const MySqlProxyServer = Object.freeze({
         }
         // Debug: surface resolved config so we can compare watch vs non-watch runs
         try {
-            Logger.info(`MySQL proxy config: proxyHost=${config.host} proxyPort=${config.port} dbHost=${String(config.poolOptions.host)} dbPort=${String(config.poolOptions.port)} dbName=${String(config.poolOptions.database)} dbUser=${String(config.poolOptions.user)} requireSigning=${String(config.signing.require)} keyId=${config.signing.keyId} hasSecret=${String(config.signing.secret.trim() !== '')} signingWindowMs=${String(config.signing.windowMs)}`);
+            Deps.Logger.info(`MySQL proxy config: proxyHost=${config.host} proxyPort=${config.port} dbHost=${String(config.poolOptions.host)} dbPort=${String(config.poolOptions.port)} dbName=${String(config.poolOptions.database)} dbUser=${String(config.poolOptions.user)} requireSigning=${String(config.signing.require)} keyId=${config.signing.keyId} hasSecret=${String(config.signing.secret.trim() !== '')} signingWindowMs=${String(config.signing.windowMs)}`);
         }
         catch {
             // noop - logging must not block startup
         }
         const pool = createPool(config.poolOptions);
-        const backend = createBackend(pool);
-        const proxy = createProxyServer({
+        const backend = createBackend(pool, config.statements);
+        const proxy = Deps.createProxyServer({
             host: config.host,
             port: config.port,
             maxBodyBytes: config.maxBodyBytes,
             backend,
             verify: async (req, body) => {
-                const verified = await verifyRequestSignature(req, body, config, 'MySQLProxyServer');
+                const verified = await Deps.verifyRequestSignature(req, body, config, 'MySQLProxyServer');
                 if (!verified.ok && verified.error) {
                     return { ok: false, status: verified.error.status, message: verified.error.message };
                 }
@@ -163,7 +196,7 @@ export const MySqlProxyServer = Object.freeze({
             },
         });
         await proxy.start();
-        Logger.info(`MySQL proxy listening on http://${config.host}:${config.port}`);
+        Deps.Logger.info(`MySQL proxy listening on http://${config.host}:${config.port}`);
     },
 });
 export default MySqlProxyServer;

package/src/proxy/postgres/PostgresProxyServer.d.ts

@@ -1,12 +1,6 @@
 import { type BaseProxyOverrides } from '../ProxyServerUtils';
-type ProxyOverrides = BaseProxyOverrides & Partial<{
-    dbHost: string;
-    dbPort: number;
-    dbName: string;
-    dbUser: string;
-    dbPass: string;
-    connectionLimit: number;
-}>;
+import type { SqlProxyDatabaseOverrides } from '../SqlProxyDbOverrides';
+type ProxyOverrides = BaseProxyOverrides & SqlProxyDatabaseOverrides;
 export declare const PostgresProxyServer: Readonly<{
     start(overrides?: ProxyOverrides): Promise<void>;
 }>;

package/src/proxy/postgres/PostgresProxyServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PostgresProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/postgres/PostgresProxyServer.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAoBjC,KAAK,cAAc,GAAG,kBAAkB,GACtC,OAAO,CAAC;IACN,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAgIL,eAAO,MAAM,mBAAmB;sBACP,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EAoC1D,CAAC;AAEH,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"PostgresProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/postgres/PostgresProxyServer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAoB5E,KAAK,cAAc,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;AA2LrE,eAAO,MAAM,mBAAmB;sBACP,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EAyC1D,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/src/proxy/postgres/PostgresProxyServer.js

@@ -1,24 +1,18 @@
-import { Env } from '../../config/env.js';
-import { Logger } from '../../config/logger.js';
-import { ErrorHandler } from '../ErrorHandler.js';
-import { createProxyServer } from '../ProxyServer.js';
-import { resolveBaseConfig, resolveBaseSigningConfig, verifyRequestSignature, } from '../ProxyServerUtils.js';
-import { RequestValidator } from '../RequestValidator.js';
-import { validateSqlPayload } from '../SqlPayloadValidator.js';
+import * as Deps from '../SqlProxyServerDeps.js';
 import { Pool } from 'pg';
 const resolveDatabaseConfig = (overrides = {}) => {
-    const dbHost = overrides.dbHost ?? Env.DB_HOST ?? '127.0.0.1';
-    const dbPort = overrides.dbPort ?? Env.DB_PORT_POSTGRESQL ?? 5432;
-    const dbName = overrides.dbName ?? Env.DB_DATABASE_POSTGRESQL ?? 'postgres';
-    const dbUser = overrides.dbUser ?? Env.DB_USERNAME_POSTGRESQL ?? 'postgres';
-    const dbPass = overrides.dbPass ?? Env.DB_PASSWORD_POSTGRESQL ?? '';
-    const connectionLimit = overrides.connectionLimit ?? Env.POSTGRES_PROXY_POOL_LIMIT;
+    const dbHost = overrides.dbHost ?? Deps.Env.DB_HOST ?? '127.0.0.1';
+    const dbPort = overrides.dbPort ?? Deps.Env.DB_PORT_POSTGRESQL ?? 5432;
+    const dbName = overrides.dbName ?? Deps.Env.DB_DATABASE_POSTGRESQL ?? 'postgres';
+    const dbUser = overrides.dbUser ?? Deps.Env.DB_USERNAME_POSTGRESQL ?? 'postgres';
+    const dbPass = overrides.dbPass ?? Deps.Env.DB_PASSWORD_POSTGRESQL ?? '';
+    const connectionLimit = overrides.connectionLimit ?? Deps.Env.POSTGRES_PROXY_POOL_LIMIT;
     return { dbHost, dbPort, dbName, dbUser, dbPass, connectionLimit };
 };
 const resolveConfig = (overrides = {}) => {
-    const proxyConfig = resolveBaseConfig(overrides, 'POSTGRES');
+    const proxyConfig = Deps.resolveBaseConfig(overrides, 'POSTGRES');
     const dbConfig = resolveDatabaseConfig(overrides);
-    const signingConfig = resolveBaseSigningConfig(overrides, 'POSTGRES');
+    const signingConfig = Deps.resolveBaseSigningConfig(overrides, 'POSTGRES');
     const poolOptions = {
         host: dbConfig.dbHost,
         port: dbConfig.dbPort,
@@ -38,6 +32,7 @@ const resolveConfig = (overrides = {}) => {
             require: signingConfig.requireSigning,
             windowMs: signingConfig.signingWindowMs,
         },
+        statements: Deps.loadStatementRegistry('POSTGRES'),
     };
 };
 const normalizeSql = (sql) => {
@@ -66,38 +61,81 @@ const handleEndpoint = (path, result) => {
             },
         };
     }
-    return ErrorHandler.toProxyError(404, 'NOT_FOUND', 'Unknown endpoint');
+    if (path === '/zin/postgres/statement') {
+        return { status: 200, body: { rows: result.rows, rowCount: result.rowCount } };
+    }
+    return Deps.ErrorHandler.toProxyError(404, 'NOT_FOUND', 'Unknown endpoint');
+};
+const handleStatementRequest = async (params) => {
+    const resolved = Deps.resolveStatementOrError(params.statements, params.payload);
+    if (!resolved.ok)
+        return resolved.response;
+    try {
+        const normalizedSql = normalizeSql(resolved.value.sql);
+        const result = await params.pool.query(normalizedSql, resolved.value.params);
+        const rows = (result.rows ?? []);
+        const rowCount = result.rowCount ?? rows.length ?? 0;
+        if (!resolved.value.mutating) {
+            return handleEndpoint('/zin/postgres/statement', { rows, rowCount });
+        }
+        return {
+            status: 200,
+            body: {
+                ok: true,
+                meta: { changes: rowCount },
+            },
+        };
+    }
+    catch (error) {
+        Deps.Logger.error('[PostgresProxyServer] Statement execution failed', {
+            path: params.request.path,
+            statementId: resolved.value.statementId,
+            mutating: resolved.value.mutating,
+            paramsCount: resolved.value.params.length,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return Deps.ErrorHandler.toProxyError(500, 'POSTGRES_ERROR', String(error));
+    }
 };
-const createBackend = (pool) => ({
+const handleSqlRequest = async (params) => {
+    const sqlValidation = Deps.validateSqlPayload(params.payload);
+    if (!sqlValidation.valid) {
+        const error = sqlValidation.error ?? {
+            code: 'VALIDATION_ERROR',
+            message: 'Invalid SQL payload',
+        };
+        return Deps.ErrorHandler.toProxyError(400, error.code, error.message);
+    }
+    try {
+        const sql = normalizeSql(sqlValidation.sql ?? '');
+        const result = await params.pool.query(sql, sqlValidation.params ?? []);
+        return handleEndpoint(params.request.path, {
+            rows: (result.rows ?? []),
+            rowCount: result.rowCount ?? result.rows?.length ?? 0,
+        });
+    }
+    catch (error) {
+        return Deps.ErrorHandler.toProxyError(500, 'POSTGRES_ERROR', String(error));
+    }
+};
+const createBackend = (pool, statements) => ({
     name: 'postgres',
     async handle(request) {
-        const methodError = RequestValidator.requirePost(request.method);
-        if (methodError) {
-            return ErrorHandler.toProxyError(405, methodError.code, methodError.message);
-        }
-        const parsed = RequestValidator.parseJson(request.body);
-        if (!parsed.ok) {
-            return ErrorHandler.toProxyError(400, parsed.error.code, parsed.error.message);
-        }
-        const sqlValidation = validateSqlPayload(parsed.value);
-        if (!sqlValidation.valid) {
-            const error = sqlValidation.error ?? {
-                code: 'VALIDATION_ERROR',
-                message: 'Invalid SQL payload',
-            };
-            return ErrorHandler.toProxyError(400, error.code, error.message);
-        }
-        try {
-            const sql = normalizeSql(sqlValidation.sql ?? '');
-            const result = await pool.query(sql, sqlValidation.params ?? []);
-            return handleEndpoint(request.path, {
-                rows: (result.rows ?? []),
-                rowCount: result.rowCount ?? result.rows?.length ?? 0,
+        const validationError = Deps.validateProxyRequest(request);
+        if (validationError !== null)
+            return validationError;
+        const parsed = Deps.parseJsonBody(request.body);
+        if ('status' in parsed)
+            return parsed;
+        if (request.path === '/zin/postgres/statement') {
+            return handleStatementRequest({
+                pool,
+                statements,
+                request,
+                payload: parsed.value,
             });
         }
-        catch (error) {
-            return ErrorHandler.toProxyError(500, 'POSTGRES_ERROR', String(error));
-        }
+        return handleSqlRequest({ pool, request, payload: parsed.value });
     },
     async health() {
         try {
@@ -105,7 +143,7 @@ const createBackend = (pool) => ({
             return { status: 200, body: { status: 'healthy' } };
         }
         catch (error) {
-            return ErrorHandler.toProxyError(503, 'UNHEALTHY', String(error));
+            return Deps.ErrorHandler.toProxyError(503, 'UNHEALTHY', String(error));
         }
     },
 });
@@ -113,20 +151,20 @@ export const PostgresProxyServer = Object.freeze({
     async start(overrides = {}) {
         const config = resolveConfig(overrides);
         try {
-            Logger.info(`Postgres proxy config: proxyHost=${config.host} proxyPort=${config.port} dbHost=${String(config.poolOptions.host)} dbPort=${String(config.poolOptions.port)} dbName=${String(config.poolOptions.database)} dbUser=${String(config.poolOptions.user)}`);
+            Deps.Logger.info(`Postgres proxy config: proxyHost=${config.host} proxyPort=${config.port} dbHost=${String(config.poolOptions.host)} dbPort=${String(config.poolOptions.port)} dbName=${String(config.poolOptions.database)} dbUser=${String(config.poolOptions.user)}`);
         }
         catch {
             // noop - logging must not block startup
         }
         const pool = new Pool(config.poolOptions);
-        const backend = createBackend(pool);
-        const proxy = createProxyServer({
+        const backend = createBackend(pool, config.statements);
+        const proxy = Deps.createProxyServer({
             host: config.host,
             port: config.port,
             maxBodyBytes: config.maxBodyBytes,
             backend,
             verify: async (req, body) => {
-                const verified = await verifyRequestSignature(req, body, config, 'PostgresProxyServer');
+                const verified = await Deps.verifyRequestSignature(req, body, config, 'PostgresProxyServer');
                 if (!verified.ok && verified.error) {
                     return { ok: false, status: verified.error.status, message: verified.error.message };
                 }
@@ -134,7 +172,7 @@ export const PostgresProxyServer = Object.freeze({
             },
         });
         await proxy.start();
-        Logger.info(`Postgres proxy listening on http://${config.host}:${config.port}`);
+        Deps.Logger.info(`Postgres proxy listening on http://${config.host}:${config.port}`);
     },
 });
 export default PostgresProxyServer;

package/src/proxy/smtp/SmtpProxyServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SmtpProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/smtp/SmtpProxyServer.ts"],"names":[],"mappings":"AA2BA,KAAK,cAAc,GAAG,OAAO,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAqUH,eAAO,MAAM,eAAe;sBACH,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EA2B1D,CAAC;AAEH,eAAe,eAAe,CAAC"}
+{"version":3,"file":"SmtpProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/smtp/SmtpProxyServer.ts"],"names":[],"mappings":"AA4BA,KAAK,cAAc,GAAG,OAAO,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAoUH,eAAO,MAAM,eAAe;sBACH,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EA2B1D,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/src/proxy/smtp/SmtpProxyServer.js

@@ -1,6 +1,7 @@
 import { Env } from '../../config/env.js';
 import { Logger } from '../../config/logger.js';
 import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { isNonEmptyString, isObject } from '../../helper/index.js';
 import { SmtpDriver, } from '../../tools/mail/drivers/Smtp.js';
 import { ErrorHandler } from '../ErrorHandler.js';
 import { createProxyServer } from '../ProxyServer.js';
@@ -102,7 +103,7 @@ const verifySignatureIfNeeded = async (req, body, config) => {
     }
     return { ok: true };
 };
-const isRecord = (value) => typeof value === 'object' && value !== null;
+const isRecord = (value) => isObject(value);
 const parseAttachment = (value) => {
     if (!isRecord(value)) {
         return {
@@ -112,13 +113,13 @@ const parseAttachment = (value) => {
     }
     const filename = value['filename'];
     const contentBase64 = value['contentBase64'];
-    if (typeof filename !== 'string' || filename.trim() === '') {
+    if (!isNonEmptyString(filename)) {
         return {
             ok: false,
             error: { code: 'VALIDATION_ERROR', message: 'attachment filename is required' },
         };
     }
-    if (typeof contentBase64 !== 'string' || contentBase64.trim() === '') {
+    if (!isNonEmptyString(contentBase64)) {
         return {
             ok: false,
             error: { code: 'VALIDATION_ERROR', message: 'attachment contentBase64 is required' },
@@ -142,14 +143,14 @@ const parseFrom = (value) => {
     }
     const email = value['email'];
     const name = value['name'];
-    if (typeof email !== 'string' || email.trim() === '') {
+    if (!isNonEmptyString(email)) {
         return { ok: false, error: { code: 'VALIDATION_ERROR', message: 'from.email is required' } };
     }
     return {
         ok: true,
         value: {
             email,
-            name: typeof name === 'string' && name.trim() !== '' ? name : undefined,
+            name: isNonEmptyString(name) ? name : undefined,
         },
     };
 };

package/src/proxy/sqlserver/SqlServerProxyServer.d.ts

@@ -1,12 +1,6 @@
 import { type BaseProxyOverrides } from '../ProxyServerUtils';
-type ProxyOverrides = BaseProxyOverrides & Partial<{
-    dbHost: string;
-    dbPort: number;
-    dbName: string;
-    dbUser: string;
-    dbPass: string;
-    connectionLimit: number;
-}>;
+import type { SqlProxyDatabaseOverrides } from '../SqlProxyDbOverrides';
+type ProxyOverrides = BaseProxyOverrides & SqlProxyDatabaseOverrides;
 export declare const SqlServerProxyServer: Readonly<{
     start(overrides?: ProxyOverrides): Promise<void>;
 }>;

package/src/proxy/sqlserver/SqlServerProxyServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SqlServerProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/sqlserver/SqlServerProxyServer.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AAejC,KAAK,cAAc,GAAG,kBAAkB,GACtC,OAAO,CAAC;IACN,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AA+KL,eAAO,MAAM,oBAAoB;sBACR,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EAmC1D,CAAC"}
+{"version":3,"file":"SqlServerProxyServer.d.ts","sourceRoot":"","sources":["../../../../src/proxy/sqlserver/SqlServerProxyServer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAA0B,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAepG,KAAK,cAAc,GAAG,kBAAkB,GAAG,yBAAyB,CAAC;AAmOrE,eAAO,MAAM,oBAAoB;sBACR,cAAc,GAAQ,OAAO,CAAC,IAAI,CAAC;EAwC1D,CAAC"}