admindb 2.1.1 → 2.3.0

package/dist/routes/api/tables.js

@@ -1 +1,216 @@
-Object.defineProperty(exports,"__esModule",{value:!0}),exports.registerTableRoutes=function(router,ctx){const{db:db}=ctx;router.get("/api/tables",(0,helpers_1.wrap)(async(_req,res)=>{const r=await db.listTables();if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to list tables.",500);(0,helpers_1.ok)(res,r.data)})),router.get("/api/tables/:table/info",(0,helpers_1.wrap)(async(req,res)=>{const info=await(0,helpers_1.requireTable)(db,req.params.table);if(!info)return(0,helpers_1.fail)(res,`Table "${req.params.table}" does not exist.`,404);(0,helpers_1.ok)(res,info)})),router.get("/api/tables/:table/fk-options",(0,helpers_1.wrap)(async(req,res)=>{const info=await(0,helpers_1.requireTable)(db,req.params.table);if(!info)return(0,helpers_1.fail)(res,`Table "${req.params.table}" does not exist.`,404);const options={};for(const fk of info.foreignKeys)try{const refInfo=await(0,helpers_1.requireTable)(db,fk.table);if(!refInfo)continue;const refCol=fk.to||refInfo.primaryKey[0]||refInfo.columns[0]?.name,pk=refInfo.primaryKey[0]??refInfo.columns[0]?.name,labelCol=refInfo.columns.find(c=>/name|title|label|username|email/i.test(c.name))?.name??pk,rows=await db.getRows(fk.table,{limit:100,orderBy:labelCol});rows.success&&rows.data&&(options[fk.from]=rows.data.map(r=>({value:r[refCol],label:null!=r[labelCol]?`${r[labelCol]} (${r[refCol]})`:String(r[refCol])})))}catch{}(0,helpers_1.ok)(res,options)})),router.get("/api/tables/:table/ddl",(0,helpers_1.wrap)(async(req,res)=>{const r=await db.getCreateStatement(req.params.table);return r.success?r.data?void(0,helpers_1.ok)(res,{sql:r.data}):(0,helpers_1.fail)(res,`Table "${req.params.table}" does not exist.`,404):(0,helpers_1.fail)(res,r.error??"Failed to fetch DDL.",500)})),router.post("/api/tables/:table/rename",(0,helpers_1.wrap)(async(req,res)=>{const newName=String(req.body?.name??"").trim();if(!newName)return(0,helpers_1.fail)(res,"New table name is required.");const r=await db.renameTable(req.params.table,newName);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to rename table.");(0,helpers_1.ok)(res,{message:`Table renamed to "${newName}".`,name:newName})})),router.delete("/api/tables/:table",(0,helpers_1.wrap)(async(req,res)=>{const r=await db.dropTable(req.params.table);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to drop table.");(0,helpers_1.ok)(res,{message:`Table "${req.params.table}" dropped.`})})),router.post("/api/tables/generate",(0,helpers_1.wrap)(async(req,res)=>{const name=String(req.body?.name??"").trim(),columns=req.body?.columns??[];if(!name)return(0,helpers_1.fail)(res,"Table name is required.");if(!Array.isArray(columns)||0===columns.length)return(0,helpers_1.fail)(res,"At least one column is required.");try{const sql=(0,generator_1.generateCreateTable)(name,columns);(0,helpers_1.ok)(res,{sql:sql})}catch(err){(0,helpers_1.fail)(res,err.message)}}));const createTableHandler=(0,helpers_1.wrap)(async(req,res)=>{const name=String(req.body?.name??"").trim(),columns=req.body?.columns??[];if(!name)return(0,helpers_1.fail)(res,"Table name is required.");if(!Array.isArray(columns)||0===columns.length)return(0,helpers_1.fail)(res,"At least one column is required.");let sql;try{sql=(0,generator_1.generateCreateTable)(name,columns)}catch(err){return(0,helpers_1.fail)(res,err.message)}const r=await db.execResult(sql);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to create table.");(0,helpers_1.ok)(res,{message:`Table "${name}" created.`,name:name},201)});router.post("/api/tables",createTableHandler),router.post("/api/tables/create",createTableHandler),router.post("/api/tables/:table/columns",(0,helpers_1.wrap)(async(req,res)=>{const col=req.body;if(!col||!col.name)return(0,helpers_1.fail)(res,"Column name is required.");const r=await db.addColumn(req.params.table,col);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to add column.");(0,helpers_1.ok)(res,{message:`Column "${col.name}" added.`},201)})),router.put("/api/tables/:table/columns/:column",(0,helpers_1.wrap)(async(req,res)=>{const col=req.body;if(!col)return(0,helpers_1.fail)(res,"Column definition is required.");const r=await db.modifyColumn(req.params.table,req.params.column,col);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to modify column.");(0,helpers_1.ok)(res,{message:`Column "${req.params.column}" updated.`})})),router.post("/api/tables/:table/columns/:column/rename",(0,helpers_1.wrap)(async(req,res)=>{const newName=String(req.body?.name??"").trim();if(!newName)return(0,helpers_1.fail)(res,"New column name is required.");const r=await db.renameColumn(req.params.table,req.params.column,newName);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to rename column.");(0,helpers_1.ok)(res,{message:`Column renamed to "${newName}".`,name:newName})})),router.delete("/api/tables/:table/columns/:column",(0,helpers_1.wrap)(async(req,res)=>{const r=await db.dropColumn(req.params.table,req.params.column);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to drop column.");(0,helpers_1.ok)(res,{message:`Column "${req.params.column}" dropped.`})})),router.post("/api/tables/:table/indexes",(0,helpers_1.wrap)(async(req,res)=>{const def=req.body;if(!def||!Array.isArray(def.columns)||0===def.columns.length)return(0,helpers_1.fail)(res,"At least one column is required for an index.");const r=await db.createIndex(req.params.table,def);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to create index.");(0,helpers_1.ok)(res,{message:"Index created."},201)})),router.delete("/api/tables/:table/indexes/:index",(0,helpers_1.wrap)(async(req,res)=>{const r=await db.dropIndex(req.params.index);if(!r.success)return(0,helpers_1.fail)(res,r.error??"Failed to drop index.");(0,helpers_1.ok)(res,{message:`Index "${req.params.index}" dropped.`})}))};const generator_1=require("../../sql/generator"),helpers_1=require("./helpers");
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerTableRoutes = registerTableRoutes;
+const generator_1 = require("../../sql/generator");
+const helpers_1 = require("./helpers");
+function registerTableRoutes(router, ctx) {
+    const { db } = ctx;
+    router.get('/api/tables', (0, helpers_1.wrap)(async (_req, res) => {
+        const r = await db.listTables();
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to list tables.', 500);
+        (0, helpers_1.ok)(res, r.data);
+    }));
+    router.get('/api/tables/:table/info', (0, helpers_1.wrap)(async (req, res) => {
+        const info = await (0, helpers_1.requireTable)(db, req.params.table);
+        if (!info)
+            return (0, helpers_1.fail)(res, `Table "${req.params.table}" does not exist.`, 404);
+        (0, helpers_1.ok)(res, info);
+    }));
+    router.get('/api/tables/:table/fk-options', (0, helpers_1.wrap)(async (req, res) => {
+        const info = await (0, helpers_1.requireTable)(db, req.params.table);
+        if (!info)
+            return (0, helpers_1.fail)(res, `Table "${req.params.table}" does not exist.`, 404);
+        const options = {};
+        for (const fk of info.foreignKeys) {
+            try {
+                const refInfo = await (0, helpers_1.requireTable)(db, fk.table);
+                if (!refInfo)
+                    continue;
+                const refCol = fk.to || refInfo.primaryKey[0] || refInfo.columns[0]?.name;
+                const pk = refInfo.primaryKey[0] ?? refInfo.columns[0]?.name;
+                const labelCol = refInfo.columns.find((c) => /name|title|label|username|email/i.test(c.name))?.name ?? pk;
+                const rows = await db.getRows(fk.table, { limit: 100, orderBy: labelCol });
+                if (rows.success && rows.data) {
+                    options[fk.from] = rows.data.map((r) => ({
+                        value: r[refCol],
+                        label: r[labelCol] != null ? `${r[labelCol]} (${r[refCol]})` : String(r[refCol]),
+                    }));
+                }
+            }
+            catch { }
+        }
+        (0, helpers_1.ok)(res, options);
+    }));
+    router.get('/api/tables/:table/ddl', (0, helpers_1.wrap)(async (req, res) => {
+        const r = await db.getCreateStatement(req.params.table);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to fetch DDL.', 500);
+        if (!r.data)
+            return (0, helpers_1.fail)(res, `Table "${req.params.table}" does not exist.`, 404);
+        (0, helpers_1.ok)(res, { sql: r.data });
+    }));
+    router.post('/api/tables/:table/rename', (0, helpers_1.wrap)(async (req, res) => {
+        const newName = String(req.body?.name ?? '').trim();
+        if (!newName)
+            return (0, helpers_1.fail)(res, 'New table name is required.');
+        const r = await db.renameTable(req.params.table, newName);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to rename table.');
+        (0, helpers_1.ok)(res, { message: `Table renamed to "${newName}".`, name: newName });
+    }));
+    router.delete('/api/tables/:table', (0, helpers_1.wrap)(async (req, res) => {
+        const r = await db.dropTable(req.params.table);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to drop table.');
+        (0, helpers_1.ok)(res, { message: `Table "${req.params.table}" dropped.` });
+    }));
+    router.post('/api/tables/bulk-drop', (0, helpers_1.wrap)(async (req, res) => {
+        const tables = Array.isArray(req.body?.tables)
+            ? req.body.tables.filter((t) => typeof t === 'string' && t.trim().length > 0)
+            : [];
+        const force = Boolean(req.body?.force);
+        if (tables.length === 0)
+            return (0, helpers_1.fail)(res, 'No tables specified.');
+        const dropped = [];
+        const failed = [];
+        if (force && db.dialect === 'sqlite')
+            await db.run('PRAGMA foreign_keys = OFF');
+        for (const table of tables) {
+            try {
+                const r = force && db.dialect === 'postgres'
+                    ? await db.run(`DROP TABLE IF EXISTS ${(0, generator_1.quoteIdentifier)(table)} CASCADE`)
+                    : await db.dropTable(table);
+                if (!r.success)
+                    throw new Error(r.error ?? 'Failed to drop table.');
+                dropped.push(table);
+            }
+            catch (err) {
+                failed.push({ table, error: err.message });
+            }
+        }
+        if (force && db.dialect === 'sqlite')
+            await db.run('PRAGMA foreign_keys = ON');
+        (0, helpers_1.ok)(res, {
+            dropped,
+            failed,
+            message: `Dropped ${dropped.length} table(s)${failed.length ? `, ${failed.length} failed` : ''}.`,
+        });
+    }));
+    router.post('/api/tables/bulk-truncate', (0, helpers_1.wrap)(async (req, res) => {
+        const tables = Array.isArray(req.body?.tables)
+            ? req.body.tables.filter((t) => typeof t === 'string' && t.trim().length > 0)
+            : [];
+        const force = Boolean(req.body?.force);
+        if (tables.length === 0)
+            return (0, helpers_1.fail)(res, 'No tables specified.');
+        const cleared = [];
+        const failed = [];
+        if (force && db.dialect === 'sqlite')
+            await db.run('PRAGMA foreign_keys = OFF');
+        for (const table of tables) {
+            try {
+                const r = force && db.dialect === 'postgres'
+                    ? await db.run(`TRUNCATE ${(0, generator_1.quoteIdentifier)(table)} RESTART IDENTITY CASCADE`)
+                    : await db.run(`DELETE FROM ${(0, generator_1.quoteIdentifier)(table)}`);
+                if (!r.success)
+                    throw new Error(r.error ?? 'Failed to clear table.');
+                cleared.push(table);
+            }
+            catch (err) {
+                failed.push({ table, error: err.message });
+            }
+        }
+        if (force && db.dialect === 'sqlite')
+            await db.run('PRAGMA foreign_keys = ON');
+        (0, helpers_1.ok)(res, {
+            cleared,
+            failed,
+            message: `Cleared ${cleared.length} table(s)${failed.length ? `, ${failed.length} failed` : ''}.`,
+        });
+    }));
+    router.post('/api/tables/generate', (0, helpers_1.wrap)(async (req, res) => {
+        const name = String(req.body?.name ?? '').trim();
+        const columns = (req.body?.columns ?? []);
+        if (!name)
+            return (0, helpers_1.fail)(res, 'Table name is required.');
+        if (!Array.isArray(columns) || columns.length === 0)
+            return (0, helpers_1.fail)(res, 'At least one column is required.');
+        try {
+            (0, helpers_1.ok)(res, { sql: (0, generator_1.generateCreateTable)(name, columns) });
+        }
+        catch (err) {
+            (0, helpers_1.fail)(res, err.message);
+        }
+    }));
+    const createTableHandler = (0, helpers_1.wrap)(async (req, res) => {
+        const name = String(req.body?.name ?? '').trim();
+        const columns = (req.body?.columns ?? []);
+        if (!name)
+            return (0, helpers_1.fail)(res, 'Table name is required.');
+        if (!Array.isArray(columns) || columns.length === 0)
+            return (0, helpers_1.fail)(res, 'At least one column is required.');
+        let sql;
+        try {
+            sql = (0, generator_1.generateCreateTable)(name, columns);
+        }
+        catch (err) {
+            return (0, helpers_1.fail)(res, err.message);
+        }
+        const r = await db.execResult(sql);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to create table.');
+        (0, helpers_1.ok)(res, { message: `Table "${name}" created.`, name }, 201);
+    });
+    router.post('/api/tables', createTableHandler);
+    router.post('/api/tables/create', createTableHandler);
+    router.post('/api/tables/:table/columns', (0, helpers_1.wrap)(async (req, res) => {
+        const col = req.body;
+        if (!col?.name)
+            return (0, helpers_1.fail)(res, 'Column name is required.');
+        const r = await db.addColumn(req.params.table, col);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to add column.');
+        (0, helpers_1.ok)(res, { message: `Column "${col.name}" added.` }, 201);
+    }));
+    router.put('/api/tables/:table/columns/:column', (0, helpers_1.wrap)(async (req, res) => {
+        const col = req.body;
+        if (!col)
+            return (0, helpers_1.fail)(res, 'Column definition is required.');
+        const r = await db.modifyColumn(req.params.table, req.params.column, col);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to modify column.');
+        (0, helpers_1.ok)(res, { message: `Column "${req.params.column}" updated.` });
+    }));
+    router.post('/api/tables/:table/columns/:column/rename', (0, helpers_1.wrap)(async (req, res) => {
+        const newName = String(req.body?.name ?? '').trim();
+        if (!newName)
+            return (0, helpers_1.fail)(res, 'New column name is required.');
+        const r = await db.renameColumn(req.params.table, req.params.column, newName);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to rename column.');
+        (0, helpers_1.ok)(res, { message: `Column renamed to "${newName}".`, name: newName });
+    }));
+    router.delete('/api/tables/:table/columns/:column', (0, helpers_1.wrap)(async (req, res) => {
+        const r = await db.dropColumn(req.params.table, req.params.column);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to drop column.');
+        (0, helpers_1.ok)(res, { message: `Column "${req.params.column}" dropped.` });
+    }));
+    router.post('/api/tables/:table/indexes', (0, helpers_1.wrap)(async (req, res) => {
+        const def = req.body;
+        if (!def || !Array.isArray(def.columns) || def.columns.length === 0) {
+            return (0, helpers_1.fail)(res, 'At least one column is required for an index.');
+        }
+        const r = await db.createIndex(req.params.table, def);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to create index.');
+        (0, helpers_1.ok)(res, { message: 'Index created.' }, 201);
+    }));
+    router.delete('/api/tables/:table/indexes/:index', (0, helpers_1.wrap)(async (req, res) => {
+        const r = await db.dropIndex(req.params.index);
+        if (!r.success)
+            return (0, helpers_1.fail)(res, r.error ?? 'Failed to drop index.');
+        (0, helpers_1.ok)(res, { message: `Index "${req.params.index}" dropped.` });
+    }));
+}

package/dist/routes/databases.js

@@ -1 +1,210 @@
-var __importDefault=this&&this.__importDefault||function(mod){return mod&&mod.__esModule?mod:{default:mod}};Object.defineProperty(exports,"__esModule",{value:!0}),exports.registerDatabasesRoutes=function(router,ctx){const{manager:manager}=ctx,allowBrowse=ctx.allowBrowse??!0,browseRoot=ctx.browseRoot?node_path_1.default.resolve(ctx.browseRoot):void 0,wrap=fn=>async(req,res)=>{try{await fn(req,res)}catch(err){res.status(500).json({success:!1,error:(0,common_1.errorMessage)(err)})}};router.get("/",async(_req,res,next)=>{try{const databases=await getDatabaseRows(manager);res.render("pages/databases",{title:"Databases",databases:databases,dbDir:manager.directory,readonly:!!ctx.readonly,allowBrowse:allowBrowse,browseRoot:browseRoot,config:{basePath:ctx.basePath}})}catch(err){next(err)}}),router.get("/api/databases",wrap(async(_req,res)=>{const data=await getDatabaseRows(manager);res.json({success:!0,data:data})}));const BLOCKED_NAMES=new Set(["node_modules",".git",".svn",".hg","System Volume Information","$RECYCLE.BIN",".env",".aws",".ssh"]);router.get("/api/fs/list",wrap(async(req,res)=>{if(!allowBrowse)return res.status(403).json({success:!1,error:"File browsing is disabled — this server was started with specific database files."});const raw=String(req.query.path??"").trim();if(raw.includes("\0"))return res.status(400).json({success:!1,error:"Invalid path."});const base=raw?node_path_1.default.resolve(raw):manager.directory;if(browseRoot&&!(0,common_1.isPathWithinRoot)(browseRoot,base))return res.status(403).json({success:!1,error:`Path is outside the allowed folder: ${browseRoot}`});if(!(0,node_fs_1.existsSync)(base))return res.status(404).json({success:!1,error:`Path does not exist: ${base}`});if(!(0,node_fs_1.statSync)(base).isDirectory())return res.status(400).json({success:!1,error:`Not a directory: ${base}`});let entries;try{entries=function(abs){const entries=[];for(const name of(0,node_fs_1.readdirSync)(abs)){if(name.startsWith("."))continue;if(BLOCKED_NAMES.has(name)||name.toLowerCase().startsWith(".env"))continue;const full=node_path_1.default.join(abs,name);let isDir=!1,size=0;try{const st=(0,node_fs_1.statSync)(full);isDir=st.isDirectory(),size=isDir?0:st.size}catch{continue}(isDir||manager.isDbFile(name))&&(browseRoot&&!(0,common_1.isPathWithinRoot)(browseRoot,full)||entries.push({name:name,path:full,isDir:isDir,isDb:!isDir,size:size}))}return entries.sort((a,b)=>a.isDir===b.isDir?a.name.localeCompare(b.name,void 0,{sensitivity:"base"}):a.isDir?-1:1),entries}(base)}catch(err){return res.status(400).json({success:!1,error:`Could not list "${base}": ${(0,common_1.errorMessage)(err)}`})}const parent=node_path_1.default.dirname(base)===base?null:node_path_1.default.dirname(base),effectiveParent=!parent||browseRoot&&!(0,common_1.isPathWithinRoot)(browseRoot,parent)?null:parent;res.json({success:!0,data:{path:base,name:node_path_1.default.basename(base)||base,parent:effectiveParent,entries:entries}})})),router.post("/api/databases/open",wrap(async(req,res)=>{if(!allowBrowse)return res.status(403).json({success:!1,error:"File browsing is disabled — this server was started with specific database files."});const p=String(req.body?.path??"").trim();if(!p||p.includes("\0"))return res.status(400).json({success:!1,error:"Valid database path is required."});const abs=node_path_1.default.resolve(p);if(browseRoot&&!(0,common_1.isPathWithinRoot)(browseRoot,abs))return res.status(403).json({success:!1,error:`Cannot open a database outside the allowed folder: ${browseRoot}`});const isRo=void 0!==req.body?.readonly?Boolean(req.body.readonly):void 0;let id;try{id=manager.openFile(p,isRo)}catch(err){return res.status(400).json({success:!1,error:(0,common_1.errorMessage)(err)})}res.json({success:!0,data:{id:id,message:`Opened "${id}".`}})})),router.post("/api/databases/connect-postgres",wrap(async(req,res)=>{if(ctx.readonly)return res.status(403).json({success:!1,error:"Read-only mode — adding connections is disabled."});const name=String(req.body?.name??"").trim(),connectionString=String(req.body?.connectionString??req.body?.connection??"").trim(),isRo=Boolean(req.body?.readonly);if(!connectionString)return res.status(400).json({success:!1,error:"PostgreSQL connection string is required (e.g. postgresql://user:password@localhost:5432/dbname)."});if(!connectionString.startsWith("postgres://")&&!connectionString.startsWith("postgresql://"))return res.status(400).json({success:!1,error:"Invalid connection protocol. Connection string must start with postgres:// or postgresql://"});let id;try{id=manager.addConnection(name,connectionString,isRo);const db=manager.open(id);await db.listTables()}catch(err){return id&&manager.remove(id),res.status(400).json({success:!1,error:`Failed to connect to PostgreSQL: ${(0,common_1.errorMessage)(err)}`})}res.status(201).json({success:!0,data:{id:id,message:`Connected to PostgreSQL database "${id}".`}})})),router.post("/api/databases/:id/mode",wrap(async(req,res)=>{if(ctx.readonly&&!1===req.body?.readonly)return res.status(403).json({success:!1,error:"Server is in global read-only mode."});const id=String(req.params.id);if(!manager.has(id))return res.status(404).json({success:!1,error:`Database "${id}" does not exist.`});const targetRo=Boolean(req.body?.readonly);manager.setReadonly(id,targetRo),ctx.invalidate&&ctx.invalidate(id),res.json({success:!0,data:{id:id,readonly:targetRo,message:`Database "${id}" mode set to ${targetRo?"Read-only":"Writable"}.`}})})),router.post("/api/databases",wrap(async(req,res)=>{if(ctx.readonly)return res.status(403).json({success:!1,error:"Read-only mode — creating databases is disabled."});const name=String(req.body?.name??"").trim();if(!name)return res.status(400).json({success:!1,error:"Database name is required."});let id;try{id=manager.create(name)}catch(err){return res.status(400).json({success:!1,error:(0,common_1.errorMessage)(err)})}res.status(201).json({success:!0,data:{id:id,message:`Database "${id}" created.`}})})),router.delete("/api/databases/:id",wrap(async(req,res)=>{if(ctx.readonly)return res.status(403).json({success:!1,error:"Read-only mode — deleting databases is disabled."});const id=String(req.params.id);if(!manager.has(id))return res.status(404).json({success:!1,error:`Database "${id}" does not exist.`});ctx.invalidate&&ctx.invalidate(id),manager.remove(id),res.json({success:!0,data:{message:`Database "${id}" removed.`}})}))};const node_fs_1=require("node:fs"),node_path_1=__importDefault(require("node:path")),common_1=require("../utils/common");function formatDate(iso){try{return new Date(iso).toLocaleString()}catch{return iso}}async function getDatabaseRows(manager){const entries=manager.list();return Promise.all(entries.map(async e=>({...e,isPostgres:"postgres"===e.dialect,isSqlite:"sqlite"===e.dialect,sizeLabel:"postgres"===e.dialect?"Remote":(0,common_1.formatBytes)(e.size),modifiedLabel:"postgres"===e.dialect?"Connected":e.modified?formatDate(e.modified):"—",tables:await manager.countTables(e.id)})))}
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDatabasesRoutes = registerDatabasesRoutes;
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const common_1 = require("../utils/common");
+function formatDate(iso) {
+    try {
+        return new Date(iso).toLocaleString();
+    }
+    catch {
+        return iso;
+    }
+}
+async function getDatabaseRows(manager) {
+    const entries = manager.list();
+    return Promise.all(entries.map(async (e) => ({
+        ...e,
+        isPostgres: e.dialect === 'postgres',
+        isSqlite: e.dialect === 'sqlite',
+        sizeLabel: e.dialect === 'postgres' ? 'Remote' : (0, common_1.formatBytes)(e.size),
+        modifiedLabel: e.dialect === 'postgres' ? 'Connected' : (e.modified ? formatDate(e.modified) : '—'),
+        tables: await manager.countTables(e.id),
+    })));
+}
+function registerDatabasesRoutes(router, ctx) {
+    const { manager } = ctx;
+    const allowBrowse = ctx.allowBrowse ?? true;
+    const browseRoot = ctx.browseRoot ? node_path_1.default.resolve(ctx.browseRoot) : undefined;
+    const wrap = (fn) => async (req, res) => {
+        try {
+            await fn(req, res);
+        }
+        catch (err) {
+            res.status(500).json({ success: false, error: (0, common_1.errorMessage)(err) });
+        }
+    };
+    router.get('/', async (_req, res, next) => {
+        try {
+            res.render('pages/databases', {
+                title: 'Databases',
+                databases: await getDatabaseRows(manager),
+                dbDir: manager.directory,
+                readonly: Boolean(ctx.readonly),
+                allowBrowse,
+                browseRoot,
+                config: { basePath: ctx.basePath },
+            });
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.get('/api/databases', wrap(async (_req, res) => {
+        res.json({ success: true, data: await getDatabaseRows(manager) });
+    }));
+    const BLOCKED_NAMES = new Set([
+        'node_modules',
+        '.git',
+        '.svn',
+        '.hg',
+        'System Volume Information',
+        '$RECYCLE.BIN',
+        '.env',
+        '.aws',
+        '.ssh',
+    ]);
+    function listDirectory(abs) {
+        const entries = [];
+        for (const name of (0, node_fs_1.readdirSync)(abs)) {
+            if (name.startsWith('.') || BLOCKED_NAMES.has(name) || name.toLowerCase().startsWith('.env'))
+                continue;
+            const full = node_path_1.default.join(abs, name);
+            let isDir = false;
+            let size = 0;
+            try {
+                const st = (0, node_fs_1.statSync)(full);
+                isDir = st.isDirectory();
+                size = isDir ? 0 : st.size;
+            }
+            catch {
+                continue;
+            }
+            if (!isDir && !manager.isDbFile(name))
+                continue;
+            if (browseRoot && !(0, common_1.isPathWithinRoot)(browseRoot, full))
+                continue;
+            entries.push({ name, path: full, isDir, isDb: !isDir, size });
+        }
+        entries.sort((a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name, undefined, { sensitivity: 'base' }) : a.isDir ? -1 : 1);
+        return entries;
+    }
+    router.get('/api/fs/list', wrap(async (req, res) => {
+        if (!allowBrowse) {
+            return res.status(403).json({ success: false, error: 'File browsing is disabled — this server was started with specific database files.' });
+        }
+        const raw = String(req.query.path ?? '').trim();
+        if (raw.includes('\0'))
+            return res.status(400).json({ success: false, error: 'Invalid path.' });
+        const base = raw ? node_path_1.default.resolve(raw) : manager.directory;
+        if (browseRoot && !(0, common_1.isPathWithinRoot)(browseRoot, base)) {
+            return res.status(403).json({ success: false, error: `Path is outside the allowed folder: ${browseRoot}` });
+        }
+        if (!(0, node_fs_1.existsSync)(base))
+            return res.status(404).json({ success: false, error: `Path does not exist: ${base}` });
+        if (!(0, node_fs_1.statSync)(base).isDirectory())
+            return res.status(400).json({ success: false, error: `Not a directory: ${base}` });
+        let entries;
+        try {
+            entries = listDirectory(base);
+        }
+        catch (err) {
+            return res.status(400).json({ success: false, error: `Could not list "${base}": ${(0, common_1.errorMessage)(err)}` });
+        }
+        const parent = node_path_1.default.dirname(base) === base ? null : node_path_1.default.dirname(base);
+        const effectiveParent = parent && (!browseRoot || (0, common_1.isPathWithinRoot)(browseRoot, parent)) ? parent : null;
+        res.json({
+            success: true,
+            data: {
+                path: base,
+                name: node_path_1.default.basename(base) || base,
+                parent: effectiveParent,
+                entries,
+            },
+        });
+    }));
+    router.post('/api/databases/open', wrap(async (req, res) => {
+        if (!allowBrowse) {
+            return res.status(403).json({ success: false, error: 'File browsing is disabled — this server was started with specific database files.' });
+        }
+        const p = String(req.body?.path ?? '').trim();
+        if (!p || p.includes('\0'))
+            return res.status(400).json({ success: false, error: 'Valid database path is required.' });
+        const abs = node_path_1.default.resolve(p);
+        if (browseRoot && !(0, common_1.isPathWithinRoot)(browseRoot, abs)) {
+            return res.status(403).json({ success: false, error: `Cannot open a database outside the allowed folder: ${browseRoot}` });
+        }
+        const isRo = req.body?.readonly !== undefined ? Boolean(req.body.readonly) : undefined;
+        const id = manager.openFile(p, isRo);
+        res.json({ success: true, data: { id, message: `Opened "${id}".` } });
+    }));
+    router.post('/api/databases/connect-postgres', wrap(async (req, res) => {
+        if (ctx.readonly)
+            return res.status(403).json({ success: false, error: 'Read-only mode — adding connections is disabled.' });
+        const name = String(req.body?.name ?? '').trim();
+        const connectionString = String(req.body?.connectionString ?? req.body?.connection ?? '').trim();
+        const isRo = Boolean(req.body?.readonly);
+        if (!connectionString) {
+            return res.status(400).json({ success: false, error: 'PostgreSQL connection string is required (e.g. postgresql://user:password@localhost:5432/dbname).' });
+        }
+        if (!(0, common_1.isPostgresConnectionString)(connectionString)) {
+            return res.status(400).json({ success: false, error: 'Invalid connection protocol. Connection string must start with postgres:// or postgresql://' });
+        }
+        let id;
+        try {
+            id = manager.addConnection(name, connectionString, isRo);
+            const db = manager.open(id);
+            await db.listTables();
+        }
+        catch (err) {
+            if (id)
+                manager.remove(id);
+            return res.status(400).json({ success: false, error: `Failed to connect to PostgreSQL: ${(0, common_1.errorMessage)(err)}` });
+        }
+        res.status(201).json({ success: true, data: { id, message: `Connected to PostgreSQL database "${id}".` } });
+    }));
+    router.post('/api/databases/:id/mode', wrap(async (req, res) => {
+        if (ctx.readonly && req.body?.readonly === false) {
+            return res.status(403).json({ success: false, error: 'Server is in global read-only mode.' });
+        }
+        const id = String(req.params.id);
+        if (!manager.has(id))
+            return res.status(404).json({ success: false, error: `Database "${id}" does not exist.` });
+        const targetRo = Boolean(req.body?.readonly);
+        manager.setReadonly(id, targetRo);
+        if (ctx.invalidate)
+            ctx.invalidate(id);
+        res.json({
+            success: true,
+            data: {
+                id,
+                readonly: targetRo,
+                message: `Database "${id}" mode set to ${targetRo ? 'Read-only' : 'Writable'}.`,
+            },
+        });
+    }));
+    router.post('/api/databases', wrap(async (req, res) => {
+        if (ctx.readonly)
+            return res.status(403).json({ success: false, error: 'Read-only mode — creating databases is disabled.' });
+        const name = String(req.body?.name ?? '').trim();
+        if (!name)
+            return res.status(400).json({ success: false, error: 'Database name is required.' });
+        const id = manager.create(name);
+        res.status(201).json({ success: true, data: { id, message: `Database "${id}" created.` } });
+    }));
+    router.delete('/api/databases/:id', wrap(async (req, res) => {
+        if (ctx.readonly)
+            return res.status(403).json({ success: false, error: 'Read-only mode — deleting databases is disabled.' });
+        const id = String(req.params.id);
+        if (!manager.has(id))
+            return res.status(404).json({ success: false, error: `Database "${id}" does not exist.` });
+        if (ctx.invalidate)
+            ctx.invalidate(id);
+        manager.remove(id);
+        res.json({ success: true, data: { message: `Database "${id}" removed.` } });
+    }));
+}

package/dist/routes/index.js

@@ -1 +1,19 @@
-var __createBinding=this&&this.__createBinding||(Object.create?function(o,m,k,k2){void 0===k2&&(k2=k);var desc=Object.getOwnPropertyDescriptor(m,k);desc&&!("get"in desc?!m.__esModule:desc.writable||desc.configurable)||(desc={enumerable:!0,get:function(){return m[k]}}),Object.defineProperty(o,k2,desc)}:function(o,m,k,k2){void 0===k2&&(k2=k),o[k2]=m[k]}),__exportStar=this&&this.__exportStar||function(m,exports){for(var p in m)"default"===p||Object.prototype.hasOwnProperty.call(exports,p)||__createBinding(exports,m,p)};Object.defineProperty(exports,"__esModule",{value:!0}),__exportStar(require("./pages"),exports),__exportStar(require("./databases"),exports),__exportStar(require("./api/index"),exports);
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./pages"), exports);
+__exportStar(require("./databases"), exports);
+__exportStar(require("./api/index"), exports);