admindb 2.1.1 → 2.2.1

package/dist/auth/middleware.js

@@ -1 +1,85 @@
-Object.defineProperty(exports,"__esModule",{value:!0}),exports.authenticateRequest=authenticateRequest,exports.createAuthMiddleware=function(config,basePath,_logger){return(req,res,next)=>{if(res.locals.authEnabled=config.enabled,res.locals.isDefaultPassword=config.isDefaultPassword,!config.enabled)return res.locals.authUser=null,next();const p=req.path;if(p.startsWith("/css/")||p.startsWith("/js/")||"/favicon.ico"===p||"/login"===p||"/logout"===p)return next();const auth=authenticateRequest(req,config);if(auth.authenticated&&auth.user)return res.locals.authUser=auth.user,req.user=auth.user,next();if(p.startsWith("/api/")||req.xhr||req.headers.accept&&req.headers.accept.includes("application/json"))return res.setHeader("WWW-Authenticate",'Basic realm="AdminDB", Bearer'),void res.status(401).json({success:!1,error:"Authentication required. Please log in or provide valid credentials."});const returnUrl=req.originalUrl||`${basePath}${req.url}`,loginUrl=`${basePath}/login${returnUrl&&returnUrl!==`${basePath}/`?`?next=${encodeURIComponent(returnUrl)}`:""}`;res.redirect(loginUrl)}};const types_1=require("./types"),crypto_1=require("./crypto");function authenticateRequest(req,config){if(!config.enabled)return{authenticated:!0,user:"anonymous"};const authHeader=req.headers.authorization;if(authHeader){const[scheme,credentials]=authHeader.split(/\s+/,2);if(scheme&&credentials)if("basic"===scheme.toLowerCase())try{const decoded=Buffer.from(credentials,"base64").toString("utf8"),colonIdx=decoded.indexOf(":");if(-1!==colonIdx){const user=decoded.slice(0,colonIdx),pass=decoded.slice(colonIdx+1);if((0,crypto_1.constantTimeCompare)(user,config.username)&&(0,crypto_1.verifyPassword)(pass,config.password))return{authenticated:!0,user:user}}}catch{}else if("bearer"===scheme.toLowerCase()){const user=(0,crypto_1.verifySessionToken)(credentials,config.secret,config.username);if(user)return{authenticated:!0,user:user};if((0,crypto_1.verifyPassword)(credentials,config.password))return{authenticated:!0,user:config.username}}}const sessionCookie=(0,crypto_1.parseCookies)(req.headers.cookie)[types_1.SESSION_COOKIE_NAME];if(sessionCookie){const user=(0,crypto_1.verifySessionToken)(sessionCookie,config.secret,config.username);if(user)return{authenticated:!0,user:user}}return{authenticated:!1}}
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateRequest = authenticateRequest;
+exports.createAuthMiddleware = createAuthMiddleware;
+const types_1 = require("./types");
+const crypto_1 = require("./crypto");
+function authenticateRequest(req, config) {
+    if (!config.enabled) {
+        return { authenticated: true, user: 'anonymous' };
+    }
+    const authHeader = req.headers.authorization;
+    if (authHeader) {
+        const [scheme, credentials] = authHeader.split(/\s+/, 2);
+        if (scheme && credentials) {
+            if (scheme.toLowerCase() === 'basic') {
+                try {
+                    const decoded = Buffer.from(credentials, 'base64').toString('utf8');
+                    const colonIdx = decoded.indexOf(':');
+                    if (colonIdx !== -1) {
+                        const user = decoded.slice(0, colonIdx);
+                        const pass = decoded.slice(colonIdx + 1);
+                        if ((0, crypto_1.constantTimeCompare)(user, config.username) && (0, crypto_1.verifyPassword)(pass, config.password)) {
+                            return { authenticated: true, user };
+                        }
+                    }
+                }
+                catch {
+                }
+            }
+            else if (scheme.toLowerCase() === 'bearer') {
+                const user = (0, crypto_1.verifySessionToken)(credentials, config.secret, config.username);
+                if (user) {
+                    return { authenticated: true, user };
+                }
+                if ((0, crypto_1.verifyPassword)(credentials, config.password)) {
+                    return { authenticated: true, user: config.username };
+                }
+            }
+        }
+    }
+    const cookies = (0, crypto_1.parseCookies)(req.headers.cookie);
+    const sessionCookie = cookies[types_1.SESSION_COOKIE_NAME];
+    if (sessionCookie) {
+        const user = (0, crypto_1.verifySessionToken)(sessionCookie, config.secret, config.username);
+        if (user) {
+            return { authenticated: true, user };
+        }
+    }
+    return { authenticated: false };
+}
+function createAuthMiddleware(config, basePath, _logger) {
+    return (req, res, next) => {
+        res.locals.authEnabled = config.enabled;
+        res.locals.isDefaultPassword = config.isDefaultPassword;
+        if (!config.enabled) {
+            res.locals.authUser = null;
+            return next();
+        }
+        const p = req.path;
+        if (p.startsWith('/css/') ||
+            p.startsWith('/js/') ||
+            p === '/favicon.ico' ||
+            p === '/login' ||
+            p === '/logout') {
+            return next();
+        }
+        const auth = authenticateRequest(req, config);
+        if (auth.authenticated && auth.user) {
+            res.locals.authUser = auth.user;
+            req.user = auth.user;
+            return next();
+        }
+        if (p.startsWith('/api/') || req.xhr || (req.headers.accept && req.headers.accept.includes('application/json'))) {
+            res.setHeader('WWW-Authenticate', 'Basic realm="AdminDB", Bearer');
+            res.status(401).json({
+                success: false,
+                error: 'Authentication required. Please log in or provide valid credentials.',
+            });
+            return;
+        }
+        const returnUrl = req.originalUrl || `${basePath}${req.url}`;
+        const loginUrl = `${basePath}/login${returnUrl && returnUrl !== `${basePath}/` ? `?next=${encodeURIComponent(returnUrl)}` : ''}`;
+        res.redirect(loginUrl);
+    };
+}

package/dist/auth/routes.js

@@ -1 +1,70 @@
-Object.defineProperty(exports,"__esModule",{value:!0}),exports.registerAuthRoutes=function(router,config,basePath,logger){router.get("/login",(req,res)=>{if(!config.enabled)return res.redirect(`${basePath}/`);if((0,middleware_1.authenticateRequest)(req,config).authenticated){const nextUrl=String(req.query.next??"").trim();return res.redirect(nextUrl.startsWith("/")?nextUrl:`${basePath}/`)}const nextUrl=String(req.query.next??"").trim();res.render("pages/login",{title:"Sign in",noSidebar:!0,next:nextUrl.startsWith("/")?nextUrl:"",isDefaultPassword:config.isDefaultPassword,error:req.query.error?String(req.query.error):null})}),router.post("/login",(req,res)=>{if(!config.enabled)return res.redirect(`${basePath}/`);const username=String(req.body?.username??"").trim(),password=String(req.body?.password??"").trim(),nextUrl=String(req.body?.next??req.query.next??"").trim();if(!((0,crypto_1.constantTimeCompare)(username,config.username)&&(0,crypto_1.verifyPassword)(password,config.password)))return logger.warn(`Failed login attempt for user "${username||"<empty>"}"`),req.xhr||req.headers.accept&&req.headers.accept.includes("application/json")?res.status(401).json({success:!1,error:"Invalid username or password."}):res.status(401).render("pages/login",{title:"Sign in",noSidebar:!0,username:username,next:nextUrl.startsWith("/")?nextUrl:"",isDefaultPassword:config.isDefaultPassword,error:"Invalid username or password. Please check your credentials."});const token=(0,crypto_1.createSessionToken)(config.username,config.secret,config.sessionDurationMs),maxAgeSec=Math.floor(config.sessionDurationMs/1e3),expiresUtc=new Date(Date.now()+config.sessionDurationMs).toUTCString(),cookiePath=basePath||"/";if(res.setHeader("Set-Cookie",`${types_1.SESSION_COOKIE_NAME}=${encodeURIComponent(token)}; Path=${cookiePath}; Max-Age=${maxAgeSec}; Expires=${expiresUtc}; HttpOnly; SameSite=Lax`),req.xhr||req.headers.accept&&req.headers.accept.includes("application/json"))return res.json({success:!0,message:"Logged in successfully.",user:config.username,token:token});const target=nextUrl.startsWith("/")?nextUrl:`${basePath}/`;res.redirect(target)});const handleLogout=(req,res)=>{const cookiePath=basePath||"/";if(res.setHeader("Set-Cookie",`${types_1.SESSION_COOKIE_NAME}=; Path=${cookiePath}; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; SameSite=Lax`),req.xhr||req.headers.accept&&req.headers.accept.includes("application/json"))return res.json({success:!0,message:"Logged out successfully."});res.redirect(`${basePath}/login`)};router.post("/logout",handleLogout),router.get("/logout",handleLogout)};const types_1=require("./types"),middleware_1=require("./middleware"),crypto_1=require("./crypto");
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAuthRoutes = registerAuthRoutes;
+const types_1 = require("./types");
+const middleware_1 = require("./middleware");
+const crypto_1 = require("./crypto");
+function registerAuthRoutes(router, config, basePath, logger) {
+    router.get('/login', (req, res) => {
+        if (!config.enabled) {
+            return res.redirect(`${basePath}/`);
+        }
+        const auth = (0, middleware_1.authenticateRequest)(req, config);
+        if (auth.authenticated) {
+            const nextUrl = String(req.query.next ?? '').trim();
+            return res.redirect(nextUrl.startsWith('/') ? nextUrl : `${basePath}/`);
+        }
+        const nextUrl = String(req.query.next ?? '').trim();
+        res.render('pages/login', {
+            title: 'Sign in',
+            noSidebar: true,
+            next: nextUrl.startsWith('/') ? nextUrl : '',
+            isDefaultPassword: config.isDefaultPassword,
+            error: req.query.error ? String(req.query.error) : null,
+        });
+    });
+    router.post('/login', (req, res) => {
+        if (!config.enabled) {
+            return res.redirect(`${basePath}/`);
+        }
+        const username = String(req.body?.username ?? '').trim();
+        const password = String(req.body?.password ?? '').trim();
+        const nextUrl = String(req.body?.next ?? req.query.next ?? '').trim();
+        const isValid = (0, crypto_1.constantTimeCompare)(username, config.username) &&
+            (0, crypto_1.verifyPassword)(password, config.password);
+        if (!isValid) {
+            logger.warn(`Failed login attempt for user "${username || '<empty>'}"`);
+            if (req.xhr || (req.headers.accept && req.headers.accept.includes('application/json'))) {
+                return res.status(401).json({ success: false, error: 'Invalid username or password.' });
+            }
+            return res.status(401).render('pages/login', {
+                title: 'Sign in',
+                noSidebar: true,
+                username,
+                next: nextUrl.startsWith('/') ? nextUrl : '',
+                isDefaultPassword: config.isDefaultPassword,
+                error: 'Invalid username or password. Please check your credentials.',
+            });
+        }
+        const token = (0, crypto_1.createSessionToken)(config.username, config.secret, config.sessionDurationMs);
+        const maxAgeSec = Math.floor(config.sessionDurationMs / 1000);
+        const expiresUtc = new Date(Date.now() + config.sessionDurationMs).toUTCString();
+        const cookiePath = basePath || '/';
+        res.setHeader('Set-Cookie', `${types_1.SESSION_COOKIE_NAME}=${encodeURIComponent(token)}; Path=${cookiePath}; Max-Age=${maxAgeSec}; Expires=${expiresUtc}; HttpOnly; SameSite=Lax`);
+        if (req.xhr || (req.headers.accept && req.headers.accept.includes('application/json'))) {
+            return res.json({ success: true, message: 'Logged in successfully.', user: config.username, token });
+        }
+        const target = nextUrl.startsWith('/') ? nextUrl : `${basePath}/`;
+        res.redirect(target);
+    });
+    const handleLogout = (req, res) => {
+        const cookiePath = basePath || '/';
+        res.setHeader('Set-Cookie', `${types_1.SESSION_COOKIE_NAME}=; Path=${cookiePath}; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:00 GMT; HttpOnly; SameSite=Lax`);
+        if (req.xhr || (req.headers.accept && req.headers.accept.includes('application/json'))) {
+            return res.json({ success: true, message: 'Logged out successfully.' });
+        }
+        res.redirect(`${basePath}/login`);
+    };
+    router.post('/logout', handleLogout);
+    router.get('/logout', handleLogout);
+}

package/dist/auth/types.js

@@ -1 +1,7 @@
-Object.defineProperty(exports,"__esModule",{value:!0}),exports.SESSION_COOKIE_NAME=exports.DEFAULT_SESSION_DURATION_MS=exports.DEFAULT_PASSWORD_HASH=exports.DEFAULT_USERNAME=void 0,exports.DEFAULT_USERNAME="admin",exports.DEFAULT_PASSWORD_HASH="scrypt:d9f2e64b8a1c3d5e7f0a2b4c6e801357:cb3032b16f29c8d44f75c779f070c61c846b17eb333d07596ceb8470fc1b4c06cc720c08796ebc86937dab28a3ef580ced38a71c940fd4a169fd2e9cb9fa40e2",exports.DEFAULT_SESSION_DURATION_MS=6048e5,exports.SESSION_COOKIE_NAME="admindb_session";
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_COOKIE_NAME = exports.DEFAULT_SESSION_DURATION_MS = exports.DEFAULT_PASSWORD_HASH = exports.DEFAULT_USERNAME = void 0;
+exports.DEFAULT_USERNAME = 'admin';
+exports.DEFAULT_PASSWORD_HASH = 'scrypt:d9f2e64b8a1c3d5e7f0a2b4c6e801357:cb3032b16f29c8d44f75c779f070c61c846b17eb333d07596ceb8470fc1b4c06cc720c08796ebc86937dab28a3ef580ced38a71c940fd4a169fd2e9cb9fa40e2';
+exports.DEFAULT_SESSION_DURATION_MS = 7 * 24 * 60 * 60 * 1000;
+exports.SESSION_COOKIE_NAME = 'admindb_session';

package/dist/cli/args.js

@@ -1 +1,320 @@
-var __importDefault=this&&this.__importDefault||function(mod){return mod&&mod.__esModule?mod:{default:mod}};Object.defineProperty(exports,"__esModule",{value:!0}),exports.helpText=function(){return["AdminDB — browser-based SQLite & PostgreSQL administration tool.","","Usage:","  admindb [options] [path|connection_url|config.json]","","Starts a local server and opens a web UI where you can browse, select and","manage SQLite databases (.db / .sqlite / .sqlite3) and PostgreSQL databases.","",'With no path or options it runs in "manager" mode: the landing page lets',"you browse the filesystem and open any database file, or create new ones.","","Arguments:","  path                           Path to a database file, PostgreSQL connection URL, or","                                 JSON configuration file containing database credentials.","","Options & Environment Variables:","  -C, --config <file.json>       Load database credentials & settings from a JSON file","  -p, --port <port>              Port to listen on (default: 45531) [PORT / ADMINDB_PORT]","  -H, --host <host>              Host/interface to bind (default: 0.0.0.0) [HOST / ADMINDB_HOST]","  -c, --connection, --pg <uri>   Open a PostgreSQL database directly [DATABASE_URL / ADMINDB_CONNECTION]","  -o, --open, --db-path <file>   Open a single database file directly [DB_PATH / ADMINDB_DB_PATH]","  -d, --dir, --db-dir <dir>      Folder of database files to manage [DB_DIR / ADMINDB_DB_DIR]","      --files, --db-files <list> Comma-separated database file paths [DB_FILES / ADMINDB_DB_FILES]","  -b, --base-path, --base <p>    URL prefix to serve under (default: /) [BASE_PATH / ADMINDB_BASE_PATH]","  -r, --readonly, --read-only    Open databases read-only (writes disabled) [READONLY / ADMINDB_READONLY]","      --serverless               Enable serverless mode (enforces read-only, disables writes) [SERVERLESS / ADMINDB_SERVERLESS]","      --auth                     Enable authentication (default: on) [ADMINDB_AUTH=true]","      --no-auth, --disable-auth  Disable authentication completely [ADMINDB_NO_AUTH=1 / ADMINDB_AUTH=false]","  -u, --username, --user <user>  Admin username (default: admin) [ADMINDB_USERNAME / ADMINDB_USER]","  -P, --password, --pass <pass>  Admin password or hash [ADMINDB_PASSWORD / ADMINDB_PASS]","      --auth-secret <sec>        Secret key used to sign session cookies [ADMINDB_SECRET / SESSION_SECRET]","  -l, --log-level <level>        debug | info | warn | error (default: info) [LOG_LEVEL / ADMINDB_LOG_LEVEL]","  -h, --help                     Show this help message","  -v, --version                  Show version","","Examples:","  admindb name.postgres.json                   # load database connections from a JSON file","  admindb postgresql://user:pass@host:5432/db  # open a PostgreSQL database directly","  admindb ./data/app.db                        # open a SQLite database file","  admindb --no-auth                            # run with authentication turned off","  admindb -C ./connections.json                # run with JSON connections config","","See docs/EXAMPLES.md for full configuration reference and deployment recipes."].join("\n")},exports.getPackageVersion=function(){return packageVersion()},exports.versionText=function(){const v=packageVersion();return v?`admindb v${v}`:"admindb"},exports.parseArgs=function(argv){const args={help:!1,version:!1,readonly:!1},positional=[];let i=0;const invalid=error=>({args:args,error:error}),takeValue=flag=>{const eq=argv[i].indexOf("=");return-1!==eq?argv[i].slice(eq+1):(i+=1,argv[i])};for(;i<argv.length;){const tok=argv[i];if("-h"===tok||"--help"===tok)args.help=!0;else if("-v"===tok||"--version"===tok)args.version=!0;else if(isFlag(tok,"-C","--config","--json")){const v=takeValue();if(void 0===v)return invalid("Missing value for --config.");args.configPath=v;try{const fileConf=(0,config_1.parseConfigFile)(v);fileConf&&(fileConf.connections&&(args.connections=fileConf.connections),fileConf.connection&&(args.connection=fileConf.connection),void 0!==fileConf.port&&(args.port=fileConf.port),void 0!==fileConf.host&&(args.host=fileConf.host),void 0!==fileConf.basePath&&(args.basePath=fileConf.basePath),void 0!==fileConf.readonly&&(args.readonly=fileConf.readonly),void 0!==fileConf.serverless&&(args.serverless=fileConf.serverless),void 0!==fileConf.logLevel&&(args.logLevel=fileConf.logLevel),"boolean"==typeof fileConf.auth?args.auth=fileConf.auth:fileConf.auth&&"object"==typeof fileConf.auth&&(args.auth=!0,fileConf.auth.username&&(args.authUsername=fileConf.auth.username),fileConf.auth.password&&(args.authPassword=fileConf.auth.password),fileConf.auth.secret&&(args.authSecret=fileConf.auth.secret)))}catch(err){return invalid(err.message)}}else if(isFlag(tok,"-p","--port")){const v=takeValue();if(void 0===v)return invalid("Missing value for --port.");const n=Number.parseInt(v,10);if(!Number.isFinite(n)||n<=0)return invalid(`Invalid port: "${v}".`);args.port=n}else if(isFlag(tok,"-H","--host")){const v=takeValue();if(void 0===v)return invalid("Missing value for --host.");args.host=v}else if(isFlag(tok,"-c","--connection","--conn","--pg")){const v=takeValue();if(void 0===v)return invalid("Missing value for --connection.");args.connection=v,args.dbPath=v}else if(isFlag(tok,"-o","--open","--db","-f","--file","--db-path","--path")){const v=takeValue();if(void 0===v)return invalid("Missing value for --open / --db-path.");args.dbPath=v,(v.startsWith("postgres://")||v.startsWith("postgresql://"))&&(args.connection=v)}else if(isFlag(tok,"-d","--dir","--folder","--db-dir")){const v=takeValue();if(void 0===v)return invalid("Missing value for --dir / --db-dir.");args.dbDir=v}else if(isFlag(tok,"--files","--db-files")){const v=takeValue();if(void 0===v)return invalid("Missing value for --files / --db-files.");args.dbFiles=v.split(",").map(s=>s.trim()).filter(Boolean)}else if(isFlag(tok,"-b","--base-path","--base")){const v=takeValue();if(void 0===v)return invalid("Missing value for --base-path.");args.basePath=v}else if(isFlag(tok,"-l","--log-level")){const v=takeValue();if(void 0===v)return invalid("Missing value for --log-level.");if(!LOG_LEVELS.includes(v))return invalid(`Invalid log level: "${v}". Expected one of: ${LOG_LEVELS.join(", ")}.`);args.logLevel=v}else if("-r"===tok||"--readonly"===tok||"--read-only"===tok)args.readonly=!0;else if("--serverless"===tok)args.serverless=!0,args.readonly=!0;else if("--no-auth"===tok||"--disable-auth"===tok)args.auth=!1;else if("--auth"===tok)args.auth=!0;else if(isFlag(tok,"-u","--username","--user","--auth-username")){const v=takeValue();if(void 0===v)return invalid("Missing value for --username.");args.authUsername=v}else if(isFlag(tok,"-P","--password","--pass","--auth-password")){const v=takeValue();if(void 0===v)return invalid("Missing value for --password.");args.authPassword=v}else if(isFlag(tok,"--auth-secret","--secret","--session-secret")){const v=takeValue();if(void 0===v)return invalid("Missing value for --auth-secret.");args.authSecret=v}else{if(tok.startsWith("-")&&tok.length>1)return invalid(`Unknown option: "${tok}".`);positional.push(tok)}i+=1}if(positional.length>1)return invalid(`Unexpected extra arguments: ${positional.slice(1).join(" ")}.`);const p=positional[0];if(p)if(p.startsWith("postgres://")||p.startsWith("postgresql://"))args.connection=p,args.dbPath=p;else if(p.endsWith(".json")||(0,node_fs_1.existsSync)(p))try{if(p.endsWith(".json")||(0,node_fs_1.statSync)(p).isFile()&&p.includes(".json")){args.configPath=p;const fileConf=(0,config_1.parseConfigFile)(p);fileConf&&(fileConf.connections&&(args.connections=fileConf.connections),fileConf.connection&&(args.connection=fileConf.connection),void 0!==fileConf.port&&void 0===args.port&&(args.port=fileConf.port),void 0!==fileConf.host&&void 0===args.host&&(args.host=fileConf.host),void 0!==fileConf.basePath&&void 0===args.basePath&&(args.basePath=fileConf.basePath),void 0!==fileConf.readonly&&(args.readonly=fileConf.readonly),void 0!==fileConf.serverless&&(args.serverless=fileConf.serverless),void 0!==fileConf.logLevel&&void 0===args.logLevel&&(args.logLevel=fileConf.logLevel),void 0===args.auth&&("boolean"==typeof fileConf.auth?args.auth=fileConf.auth:fileConf.auth&&"object"==typeof fileConf.auth&&(args.auth=!0,fileConf.auth.username&&!args.authUsername&&(args.authUsername=fileConf.auth.username),fileConf.auth.password&&!args.authPassword&&(args.authPassword=fileConf.auth.password),fileConf.auth.secret&&!args.authSecret&&(args.authSecret=fileConf.auth.secret))))}else(0,node_fs_1.statSync)(p).isDirectory()?args.dbDir=p:args.dbPath=p}catch(err){if(p.endsWith(".json"))return invalid(err.message);args.dbPath=p}else args.dbPath=p;return{args:args}};const node_fs_1=require("node:fs"),node_path_1=__importDefault(require("node:path")),config_1=require("./config"),LOG_LEVELS=["debug","info","warn","error"];function packageVersion(){try{const candidates=[node_path_1.default.join(__dirname,"..","..","package.json"),node_path_1.default.join(__dirname,"..","package.json"),node_path_1.default.join(__dirname,"package.json")];for(const p of candidates)if((0,node_fs_1.existsSync)(p)){const raw=(0,node_fs_1.readFileSync)(p,"utf8"),pkg=JSON.parse(raw);if(pkg.version)return pkg.version}return""}catch{return""}}function isFlag(tok,...names){return names.includes(tok)||names.some(n=>n.length>2&&tok.startsWith(n+"="))}
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.helpText = helpText;
+exports.getPackageVersion = getPackageVersion;
+exports.versionText = versionText;
+exports.parseArgs = parseArgs;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const common_1 = require("../utils/common");
+const config_1 = require("./config");
+const LOG_LEVELS = ['debug', 'info', 'warn', 'error'];
+function helpText() {
+    return [
+        'AdminDB — browser-based SQLite & PostgreSQL administration tool.',
+        '',
+        'Usage:',
+        '  admindb [options] [path|connection_url|config.json]',
+        '',
+        'Starts a local server and opens a web UI where you can browse, select and',
+        'manage SQLite databases (.db / .sqlite / .sqlite3) and PostgreSQL databases.',
+        '',
+        'With no path or options it runs in "manager" mode: the landing page lets',
+        'you browse the filesystem and open any database file, or create new ones.',
+        '',
+        'Arguments:',
+        '  path                           Path to a database file, PostgreSQL connection URL, or',
+        '                                 JSON configuration file containing database credentials.',
+        '',
+        'Options & Environment Variables:',
+        '  -C, --config <file.json>       Load database credentials & settings from a JSON file',
+        '  -p, --port <port>              Port to listen on (default: 45531) [PORT / ADMINDB_PORT]',
+        '  -H, --host <host>              Host/interface to bind (default: 0.0.0.0) [HOST / ADMINDB_HOST]',
+        '  -c, --connection, --pg <uri>   Open a PostgreSQL database directly [DATABASE_URL / ADMINDB_CONNECTION]',
+        '  -o, --open, --db-path <file>   Open a single database file directly [DB_PATH / ADMINDB_DB_PATH]',
+        '  -d, --dir, --db-dir <dir>      Folder of database files to manage [DB_DIR / ADMINDB_DB_DIR]',
+        '      --files, --db-files <list> Comma-separated database file paths [DB_FILES / ADMINDB_DB_FILES]',
+        '  -b, --base-path, --base <p>    URL prefix to serve under (default: /) [BASE_PATH / ADMINDB_BASE_PATH]',
+        '  -r, --readonly, --read-only    Open databases read-only (writes disabled) [READONLY / ADMINDB_READONLY]',
+        '      --serverless               Enable serverless mode (enforces read-only, disables writes) [SERVERLESS / ADMINDB_SERVERLESS]',
+        '      --auth                     Enable authentication (default: on) [ADMINDB_AUTH=true]',
+        '      --no-auth, --disable-auth  Disable authentication completely [ADMINDB_NO_AUTH=1 / ADMINDB_AUTH=false]',
+        '  -u, --username, --user <user>  Admin username (default: admin) [ADMINDB_USERNAME / ADMINDB_USER]',
+        '  -P, --password, --pass <pass>  Admin password or hash [ADMINDB_PASSWORD / ADMINDB_PASS]',
+        '      --auth-secret <sec>        Secret key used to sign session cookies [ADMINDB_SECRET / SESSION_SECRET]',
+        '  -l, --log-level <level>        debug | info | warn | error (default: info) [LOG_LEVEL / ADMINDB_LOG_LEVEL]',
+        '  -h, --help                     Show this help message',
+        '  -v, --version                  Show version',
+        '',
+        'Examples:',
+        '  admindb name.postgres.json                   # load database connections from a JSON file',
+        '  admindb postgresql://user:pass@host:5432/db  # open a PostgreSQL database directly',
+        '  admindb ./data/app.db                        # open a SQLite database file',
+        '  admindb --no-auth                            # run with authentication turned off',
+        '  admindb -C ./connections.json                # run with JSON connections config',
+        '',
+        'See docs/EXAMPLES.md for full configuration reference and deployment recipes.',
+    ].join('\n');
+}
+function packageVersion() {
+    try {
+        const candidates = [
+            node_path_1.default.join(__dirname, '..', '..', 'package.json'),
+            node_path_1.default.join(__dirname, '..', 'package.json'),
+            node_path_1.default.join(__dirname, 'package.json'),
+        ];
+        for (const p of candidates) {
+            if ((0, node_fs_1.existsSync)(p)) {
+                const raw = (0, node_fs_1.readFileSync)(p, 'utf8');
+                const pkg = JSON.parse(raw);
+                if (pkg.version)
+                    return pkg.version;
+            }
+        }
+        return '';
+    }
+    catch {
+        return '';
+    }
+}
+function getPackageVersion() {
+    return packageVersion();
+}
+function versionText() {
+    const v = packageVersion();
+    return v ? `admindb v${v}` : 'admindb';
+}
+function isFlag(tok, ...names) {
+    return names.includes(tok) || names.some((n) => n.length > 2 && tok.startsWith(n + '='));
+}
+function parseArgs(argv) {
+    const args = { help: false, version: false, readonly: false };
+    const positional = [];
+    let i = 0;
+    const invalid = (error) => ({ args, error });
+    const takeValue = (flag) => {
+        const eq = argv[i].indexOf('=');
+        if (eq !== -1)
+            return argv[i].slice(eq + 1);
+        i += 1;
+        return argv[i];
+    };
+    while (i < argv.length) {
+        const tok = argv[i];
+        if (tok === '-h' || tok === '--help') {
+            args.help = true;
+        }
+        else if (tok === '-v' || tok === '--version') {
+            args.version = true;
+        }
+        else if (isFlag(tok, '-C', '--config', '--json')) {
+            const v = takeValue('--config');
+            if (v === undefined)
+                return invalid('Missing value for --config.');
+            args.configPath = v;
+            try {
+                const fileConf = (0, config_1.parseConfigFile)(v);
+                if (fileConf) {
+                    if (fileConf.connections)
+                        args.connections = fileConf.connections;
+                    if (fileConf.connection)
+                        args.connection = fileConf.connection;
+                    if (fileConf.port !== undefined)
+                        args.port = fileConf.port;
+                    if (fileConf.host !== undefined)
+                        args.host = fileConf.host;
+                    if (fileConf.basePath !== undefined)
+                        args.basePath = fileConf.basePath;
+                    if (fileConf.readonly !== undefined)
+                        args.readonly = fileConf.readonly;
+                    if (fileConf.serverless !== undefined)
+                        args.serverless = fileConf.serverless;
+                    if (fileConf.logLevel !== undefined)
+                        args.logLevel = fileConf.logLevel;
+                    if (typeof fileConf.auth === 'boolean')
+                        args.auth = fileConf.auth;
+                    else if (fileConf.auth && typeof fileConf.auth === 'object') {
+                        args.auth = true;
+                        if (fileConf.auth.username)
+                            args.authUsername = fileConf.auth.username;
+                        if (fileConf.auth.password)
+                            args.authPassword = fileConf.auth.password;
+                        if (fileConf.auth.secret)
+                            args.authSecret = fileConf.auth.secret;
+                    }
+                }
+            }
+            catch (err) {
+                return invalid(err.message);
+            }
+        }
+        else if (isFlag(tok, '-p', '--port')) {
+            const v = takeValue('--port');
+            if (v === undefined)
+                return invalid('Missing value for --port.');
+            const n = Number.parseInt(v, 10);
+            if (!Number.isFinite(n) || n <= 0)
+                return invalid(`Invalid port: "${v}".`);
+            args.port = n;
+        }
+        else if (isFlag(tok, '-H', '--host')) {
+            const v = takeValue('--host');
+            if (v === undefined)
+                return invalid('Missing value for --host.');
+            args.host = v;
+        }
+        else if (isFlag(tok, '-c', '--connection', '--conn', '--pg')) {
+            const v = takeValue('--connection');
+            if (v === undefined)
+                return invalid('Missing value for --connection.');
+            args.connection = v;
+            args.dbPath = v;
+        }
+        else if (isFlag(tok, '-o', '--open', '--db', '-f', '--file', '--db-path', '--path')) {
+            const v = takeValue('--open');
+            if (v === undefined)
+                return invalid('Missing value for --open / --db-path.');
+            args.dbPath = v;
+            if ((0, common_1.isPostgresConnectionString)(v)) {
+                args.connection = v;
+            }
+        }
+        else if (isFlag(tok, '-d', '--dir', '--folder', '--db-dir')) {
+            const v = takeValue('--dir');
+            if (v === undefined)
+                return invalid('Missing value for --dir / --db-dir.');
+            args.dbDir = v;
+        }
+        else if (isFlag(tok, '--files', '--db-files')) {
+            const v = takeValue('--files');
+            if (v === undefined)
+                return invalid('Missing value for --files / --db-files.');
+            args.dbFiles = v
+                .split(',')
+                .map((s) => s.trim())
+                .filter(Boolean);
+        }
+        else if (isFlag(tok, '-b', '--base-path', '--base')) {
+            const v = takeValue('--base-path');
+            if (v === undefined)
+                return invalid('Missing value for --base-path.');
+            args.basePath = v;
+        }
+        else if (isFlag(tok, '-l', '--log-level')) {
+            const v = takeValue('--log-level');
+            if (v === undefined)
+                return invalid('Missing value for --log-level.');
+            if (!LOG_LEVELS.includes(v)) {
+                return invalid(`Invalid log level: "${v}". Expected one of: ${LOG_LEVELS.join(', ')}.`);
+            }
+            args.logLevel = v;
+        }
+        else if (tok === '-r' || tok === '--readonly' || tok === '--read-only') {
+            args.readonly = true;
+        }
+        else if (tok === '--serverless') {
+            args.serverless = true;
+            args.readonly = true;
+        }
+        else if (tok === '--no-auth' || tok === '--disable-auth') {
+            args.auth = false;
+        }
+        else if (tok === '--auth') {
+            args.auth = true;
+        }
+        else if (isFlag(tok, '-u', '--username', '--user', '--auth-username')) {
+            const v = takeValue('--username');
+            if (v === undefined)
+                return invalid('Missing value for --username.');
+            args.authUsername = v;
+        }
+        else if (isFlag(tok, '-P', '--password', '--pass', '--auth-password')) {
+            const v = takeValue('--password');
+            if (v === undefined)
+                return invalid('Missing value for --password.');
+            args.authPassword = v;
+        }
+        else if (isFlag(tok, '--auth-secret', '--secret', '--session-secret')) {
+            const v = takeValue('--auth-secret');
+            if (v === undefined)
+                return invalid('Missing value for --auth-secret.');
+            args.authSecret = v;
+        }
+        else if (tok.startsWith('-') && tok.length > 1) {
+            return invalid(`Unknown option: "${tok}".`);
+        }
+        else {
+            positional.push(tok);
+        }
+        i += 1;
+    }
+    if (positional.length > 1) {
+        return invalid(`Unexpected extra arguments: ${positional.slice(1).join(' ')}.`);
+    }
+    const p = positional[0];
+    if (p) {
+        if ((0, common_1.isPostgresConnectionString)(p)) {
+            args.connection = p;
+            args.dbPath = p;
+        }
+        else if (p.endsWith('.json') || (0, node_fs_1.existsSync)(p)) {
+            try {
+                const isJson = p.endsWith('.json');
+                if (isJson || ((0, node_fs_1.statSync)(p).isFile() && p.includes('.json'))) {
+                    args.configPath = p;
+                    const fileConf = (0, config_1.parseConfigFile)(p);
+                    if (fileConf) {
+                        if (fileConf.connections)
+                            args.connections = fileConf.connections;
+                        if (fileConf.connection)
+                            args.connection = fileConf.connection;
+                        if (fileConf.port !== undefined && args.port === undefined)
+                            args.port = fileConf.port;
+                        if (fileConf.host !== undefined && args.host === undefined)
+                            args.host = fileConf.host;
+                        if (fileConf.basePath !== undefined && args.basePath === undefined)
+                            args.basePath = fileConf.basePath;
+                        if (fileConf.readonly !== undefined)
+                            args.readonly = fileConf.readonly;
+                        if (fileConf.serverless !== undefined)
+                            args.serverless = fileConf.serverless;
+                        if (fileConf.logLevel !== undefined && args.logLevel === undefined)
+                            args.logLevel = fileConf.logLevel;
+                        if (args.auth === undefined) {
+                            if (typeof fileConf.auth === 'boolean')
+                                args.auth = fileConf.auth;
+                            else if (fileConf.auth && typeof fileConf.auth === 'object') {
+                                args.auth = true;
+                                if (fileConf.auth.username && !args.authUsername)
+                                    args.authUsername = fileConf.auth.username;
+                                if (fileConf.auth.password && !args.authPassword)
+                                    args.authPassword = fileConf.auth.password;
+                                if (fileConf.auth.secret && !args.authSecret)
+                                    args.authSecret = fileConf.auth.secret;
+                            }
+                        }
+                    }
+                }
+                else if ((0, node_fs_1.statSync)(p).isDirectory()) {
+                    args.dbDir = p;
+                }
+                else {
+                    args.dbPath = p;
+                }
+            }
+            catch (err) {
+                if (p.endsWith('.json')) {
+                    return invalid(err.message);
+                }
+                args.dbPath = p;
+            }
+        }
+        else {
+            args.dbPath = p;
+        }
+    }
+    return { args };
+}