sqlite-hub 1.2.0 → 1.5.0

package/tests/row-editor-timestamp-preview.test.js

@@ -1,192 +0,0 @@
-const Database = require("better-sqlite3");
-const assert = require("node:assert/strict");
-const { readFileSync } = require("node:fs");
-const path = require("node:path");
-const test = require("node:test");
-const { DataBrowserService } = require("../server/services/sqlite/dataBrowserService");
-
-let timestampPreviewModulePromise = null;
-
-function loadTimestampPreviewModule() {
-  if (!timestampPreviewModulePromise) {
-    const source = readFileSync(
-      path.resolve(__dirname, "../frontend/js/utils/timestampPreview.js"),
-      "utf8"
-    );
-    const url = `data:text/javascript;base64,${Buffer.from(source).toString("base64")}`;
-
-    timestampPreviewModulePromise = import(url);
-  }
-
-  return timestampPreviewModulePromise;
-}
-
-function createTableMeta() {
-  return {
-    columns: [
-      { name: "id", primaryKeyPosition: 1 },
-      { name: "parent_id", primaryKeyPosition: 0 },
-      { name: "created_at", primaryKeyPosition: 0 },
-      { name: "updated_at", primaryKeyPosition: 0 },
-      { name: "published_at", primaryKeyPosition: 0 },
-      { name: "price", primaryKeyPosition: 0 },
-    ],
-    foreignKeys: [
-      {
-        mappings: [{ from: "parent_id", to: "id" }],
-      },
-    ],
-  };
-}
-
-test("row editor timestamp preview protects primary and foreign keys", async () => {
-  const {
-    getTimestampPreviewForField,
-    isProtectedKeyColumn,
-  } = await loadTimestampPreviewModule();
-  const tableMeta = createTableMeta();
-
-  assert.equal(isProtectedKeyColumn("id", tableMeta), true);
-  assert.equal(isProtectedKeyColumn("parent_id", tableMeta), true);
-
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "id",
-      value: "1717682400",
-      tableMeta,
-    }).kind,
-    "protected-key"
-  );
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "parent_id",
-      value: "1717682400",
-      tableMeta,
-    }).kind,
-    "protected-key"
-  );
-});
-
-test("row editor timestamp preview formats plausible non-key timestamp values", async () => {
-  const { getTimestampPreviewForField } = await loadTimestampPreviewModule();
-  const tableMeta = createTableMeta();
-
-  const createdAtPreview = getTimestampPreviewForField({
-    columnName: "created_at",
-    value: "1717682400",
-    tableMeta,
-  });
-  const updatedAtPreview = getTimestampPreviewForField({
-    columnName: "updated_at",
-    value: "1717682400000",
-    tableMeta,
-  });
-  const pricePreview = getTimestampPreviewForField({
-    columnName: "price",
-    value: "1717682400",
-    tableMeta,
-  });
-  const publishedAtPreview = getTimestampPreviewForField({
-    columnName: "published_at",
-    value: "1717682400000000",
-    tableMeta,
-  });
-
-  assert.equal(createdAtPreview.kind, "timestamp");
-  assert.equal(createdAtPreview.sourceFormat, "unix-seconds");
-  assert.equal(updatedAtPreview.kind, "timestamp");
-  assert.equal(updatedAtPreview.sourceFormat, "unix-milliseconds");
-  assert.equal(publishedAtPreview.kind, "timestamp");
-  assert.equal(publishedAtPreview.sourceFormat, "unix-microseconds");
-  assert.equal(pricePreview.kind, "timestamp");
-  assert.match(createdAtPreview.formatted, /^\d{2}\.\d{2}\.\d{4}, \d{2}:\d{2}:\d{2}$/);
-});
-
-test("row editor timestamp preview ignores ids and invalid timestamps", async () => {
-  const { getTimestampPreviewForField } = await loadTimestampPreviewModule();
-  const tableMeta = createTableMeta();
-
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "external_id",
-      value: "1717682400",
-      tableMeta,
-    }).kind,
-    "none"
-  );
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "created_at",
-      value: "42",
-      tableMeta,
-    }).kind,
-    "none"
-  );
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "created_at",
-      value: "not a timestamp",
-      tableMeta,
-    }).kind,
-    "none"
-  );
-});
-
-test("row editor timestamp preview accepts ISO and SQLite datetime strings", async () => {
-  const { getTimestampPreviewForField } = await loadTimestampPreviewModule();
-  const tableMeta = createTableMeta();
-
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "created_at",
-      value: "2026-06-06T18:49:00Z",
-      tableMeta,
-    }).kind,
-    "timestamp"
-  );
-  assert.equal(
-    getTimestampPreviewForField({
-      columnName: "updated_at",
-      value: "2026-06-06 18:49:00",
-      tableMeta,
-    }).kind,
-    "timestamp"
-  );
-});
-
-test("row update stores the submitted raw value without date conversion", () => {
-  const db = new Database(":memory:");
-
-  try {
-    db.exec(`
-      CREATE TABLE events (
-        id INTEGER PRIMARY KEY,
-        created_at TEXT
-      );
-      INSERT INTO events (id, created_at) VALUES (1, 'before');
-    `);
-
-    const service = new DataBrowserService({
-      connectionManager: {
-        assertWritable() {},
-        getActiveDatabase: () => db,
-      },
-    });
-    const tableData = service.getTableData("events", { limit: 10, offset: 0 });
-    const identity = tableData.rows[0].__identity;
-
-    service.updateTableRow("events", {
-      identity,
-      values: {
-        created_at: "1717682400",
-      },
-    });
-
-    assert.equal(
-      db.prepare("SELECT created_at FROM events WHERE id = 1").get().created_at,
-      "1717682400"
-    );
-  } finally {
-    db.close();
-  }
-});

package/tests/security-paths.test.js

@@ -1,84 +0,0 @@
-const fs = require("node:fs");
-const os = require("node:os");
-const path = require("node:path");
-const { pathToFileURL } = require("node:url");
-const assert = require("node:assert/strict");
-const test = require("node:test");
-const { ValidationError } = require("../server/utils/errors");
-const {
-  resolvePathInsideDirectory,
-  resolveUserPath,
-} = require("../server/utils/fileValidation");
-const { MediaTaggingService } = require("../server/services/sqlite/mediaTaggingService");
-
-function createTempDirectory(t) {
-  const directoryPath = fs.mkdtempSync(path.join(os.tmpdir(), "sqlite-hub-security-"));
-  t.after(() => fs.rmSync(directoryPath, { recursive: true, force: true }));
-  return directoryPath;
-}
-
-test("resolveUserPath rejects parent traversal segments", () => {
-  assert.throws(() => resolveUserPath("../outside.db"), ValidationError);
-  assert.throws(() => resolveUserPath("~/../outside.db"), ValidationError);
-  assert.throws(() => resolveUserPath("data/\0outside.db"), ValidationError);
-});
-
-test("resolvePathInsideDirectory resolves only paths under the supplied root", (t) => {
-  const root = createTempDirectory(t);
-  const insidePath = path.join(root, "media", "photo.jpg");
-
-  assert.equal(
-    resolvePathInsideDirectory(root, "media/photo.jpg", "Media file path"),
-    insidePath
-  );
-  assert.equal(
-    resolvePathInsideDirectory(root, insidePath, "Media file path"),
-    insidePath
-  );
-  assert.throws(
-    () =>
-      resolvePathInsideDirectory(
-        root,
-        path.join(path.dirname(root), "secret.txt"),
-        "Media file path"
-      ),
-    ValidationError
-  );
-  assert.throws(
-    () => resolvePathInsideDirectory(root, "../secret.txt", "Media file path"),
-    ValidationError
-  );
-});
-
-test("media file resolution is scoped to the active database directory", (t) => {
-  const root = createTempDirectory(t);
-  const mediaDirectory = path.join(root, "media");
-  const mediaPath = path.join(mediaDirectory, "photo.jpg");
-
-  fs.mkdirSync(mediaDirectory, { recursive: true });
-  fs.writeFileSync(mediaPath, "image");
-
-  const service = new MediaTaggingService({
-    connectionManager: {
-      getActiveConnection: () => ({
-        path: path.join(root, "database.sqlite"),
-      }),
-    },
-    appStateStore: {},
-  });
-
-  assert.equal(service.resolveMediaFilePath("media/photo.jpg"), mediaPath);
-  assert.equal(
-    service.resolveMediaFilePath(pathToFileURL(mediaPath).toString()),
-    mediaPath
-  );
-  assert.deepEqual(service.getMediaFileForRequest("media/photo.jpg"), {
-    directory: mediaDirectory,
-    fileName: "photo.jpg",
-  });
-  assert.throws(() => service.resolveMediaFilePath("../secret.jpg"), ValidationError);
-  assert.throws(
-    () => service.resolveMediaFilePath(path.join(path.dirname(root), "secret.jpg")),
-    ValidationError
-  );
-});

package/tests/settings-api-tokens-route.test.js

@@ -1,97 +0,0 @@
-const assert = require("node:assert/strict");
-const express = require("express");
-const fs = require("node:fs");
-const os = require("node:os");
-const path = require("node:path");
-const test = require("node:test");
-
-const { createSettingsRouter } = require("../server/routes/settings");
-const { ApiTokenService } = require("../server/services/apiTokenService");
-const { AppStateStore } = require("../server/services/storage/appStateStore");
-const { errorMiddleware } = require("../server/utils/errors");
-
-test("settings routes create and delete tokens for the active database", async (t) => {
-  const directory = fs.mkdtempSync(path.join(os.tmpdir(), "sqlite-hub-settings-token-"));
-  const store = new AppStateStore(path.join(directory, "state.db"));
-  const connection = {
-    id: "db-active",
-    label: "Active Database",
-    path: path.join(directory, "active.db"),
-    lastOpenedAt: new Date().toISOString(),
-    lastModifiedAt: new Date().toISOString(),
-    sizeBytes: 0,
-    readOnly: false,
-    logoPath: null,
-  };
-
-  store.upsertRecentConnection(connection);
-
-  const tokenService = new ApiTokenService({ appStateStore: store });
-  const connectionManager = {
-    getActiveConnection: () => connection,
-  };
-  const app = express();
-
-  app.use(express.json());
-  app.use(
-    "/api/settings",
-    createSettingsRouter({
-      appStateStore: store,
-      connectionManager,
-      tokenService,
-      versionCheckService: async () => ({
-        packageName: "sqlite-hub",
-        currentVersion: "1.0.1",
-        latestVersion: "1.1.0",
-        updateAvailable: true,
-        checkedAt: "2026-06-19T20:00:00.000Z",
-        source: "npm",
-        releaseUrl: "https://www.npmjs.com/package/sqlite-hub/v/1.1.0",
-      }),
-    })
-  );
-  app.use(errorMiddleware);
-
-  const server = await new Promise((resolve) => {
-    const listener = app.listen(0, "127.0.0.1", () => resolve(listener));
-  });
-
-  t.after(async () => {
-    await new Promise((resolve, reject) => {
-      server.close((error) => (error ? reject(error) : resolve()));
-    });
-    store.db.close();
-    fs.rmSync(directory, { recursive: true, force: true });
-  });
-
-  const baseUrl = `http://127.0.0.1:${server.address().port}/api/settings`;
-  const createResponse = await fetch(`${baseUrl}/api-tokens`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ name: "Settings token" }),
-  });
-  const created = await createResponse.json();
-
-  assert.equal(createResponse.status, 201);
-  assert.equal(created.data.databaseKey, connection.id);
-  assert.match(created.data.token, /^shub_/);
-  assert.equal(created.metadata.apiTokens.length, 1);
-  assert.equal(created.metadata.apiTokens[0].token, undefined);
-
-  const deleteResponse = await fetch(`${baseUrl}/api-tokens/${created.data.id}`, {
-    method: "DELETE",
-  });
-  const deleted = await deleteResponse.json();
-
-  assert.equal(deleteResponse.status, 200);
-  assert.deepEqual(deleted.data, { id: created.data.id, deleted: true });
-  assert.equal(deleted.metadata.apiTokens.length, 0);
-
-  const versionResponse = await fetch(`${baseUrl}/version-check`);
-  const versionCheck = await versionResponse.json();
-
-  assert.equal(versionResponse.status, 200);
-  assert.equal(versionCheck.data.latestVersion, "1.1.0");
-  assert.equal(versionCheck.data.updateAvailable, true);
-  assert.equal(versionCheck.metadata.appVersion, require("../package.json").version);
-});

package/tests/settings-metadata.test.js

@@ -1,114 +0,0 @@
-const assert = require("node:assert/strict");
-const test = require("node:test");
-
-const { version } = require("../package.json");
-const {
-  checkLatestAppVersion,
-  compareSemver,
-  isNewerVersion,
-  readSettingsMetadata,
-  readSqliteVersion,
-} = require("../server/routes/settings");
-const { buildAppInfo } = require("../server/services/appInfoService");
-
-test("settings metadata exposes app and SQLite versions", () => {
-  const metadata = readSettingsMetadata();
-
-  assert.equal(metadata.appVersion, version);
-  assert.match(metadata.sqliteVersion, /^\d+\.\d+\.\d+$/);
-});
-
-test("SQLite runtime version is readable", () => {
-  assert.match(readSqliteVersion(), /^\d+\.\d+\.\d+$/);
-});
-
-test("settings version comparison detects newer releases", () => {
-  assert.equal(compareSemver("1.2.0", "1.1.9"), 1);
-  assert.equal(compareSemver("1.0.1", "1.0.1"), 0);
-  assert.equal(compareSemver("1.0.0", "1.0.1"), -1);
-  assert.equal(isNewerVersion("1.0.2", "1.0.1"), true);
-  assert.equal(isNewerVersion("1.0.1", "1.0.1"), false);
-});
-
-test("settings version check reads the npm latest version", async () => {
-  const result = await checkLatestAppVersion({
-    currentVersion: "1.0.1",
-    packageName: "sqlite-hub",
-    fetchImpl: async (url, options) => {
-      assert.equal(url, "https://registry.npmjs.org/sqlite-hub/latest");
-      assert.equal(options.headers.Accept, "application/json");
-
-      return {
-        ok: true,
-        json: async () => ({ version: "1.1.0" }),
-      };
-    },
-  });
-
-  assert.equal(result.packageName, "sqlite-hub");
-  assert.equal(result.currentVersion, "1.0.1");
-  assert.equal(result.latestVersion, "1.1.0");
-  assert.equal(result.updateAvailable, true);
-  assert.equal(result.source, "npm");
-  assert.equal(result.releaseUrl, "https://www.npmjs.com/package/sqlite-hub/v/1.1.0");
-  assert.match(result.checkedAt, /^\d{4}-\d{2}-\d{2}T/);
-});
-
-test("app info includes update status for CLI and API consumers", async () => {
-  const info = await buildAppInfo({
-    port: 4173,
-    url: "http://127.0.0.1:4173",
-    currentVersion: "1.0.1",
-    sqliteVersion: "3.50.0",
-    versionCheckService: async () => ({
-      packageName: "sqlite-hub",
-      currentVersion: "1.0.1",
-      latestVersion: "1.1.0",
-      updateAvailable: true,
-      checkedAt: "2026-06-20T10:00:00.000Z",
-      source: "npm",
-      releaseUrl: "https://www.npmjs.com/package/sqlite-hub/v/1.1.0",
-    }),
-  });
-
-  assert.equal(info.packageName, "sqlite-hub");
-  assert.equal(info.appVersion, "1.0.1");
-  assert.equal(info.sqliteVersion, "3.50.0");
-  assert.equal(info.port, 4173);
-  assert.equal(info.url, "http://127.0.0.1:4173");
-  assert.equal(info.versionCheck.status, "update_available");
-  assert.equal(info.versionCheck.updateAvailable, true);
-});
-
-test("app info reports unknown version status when registry lookup fails", async () => {
-  const info = await buildAppInfo({
-    currentVersion: "1.0.1",
-    sqliteVersion: "3.50.0",
-    versionCheckService: async () => {
-      throw new Error("offline");
-    },
-  });
-
-  assert.equal(info.versionCheck.status, "unknown");
-  assert.equal(info.versionCheck.updateAvailable, null);
-  assert.equal(info.versionCheck.error.message, "offline");
-});
-
-test("app info marks local builds newer than npm latest as ahead", async () => {
-  const info = await buildAppInfo({
-    currentVersion: "1.1.0",
-    sqliteVersion: "3.50.0",
-    versionCheckService: async () => ({
-      packageName: "sqlite-hub",
-      currentVersion: "1.1.0",
-      latestVersion: "1.0.0",
-      updateAvailable: false,
-      checkedAt: "2026-06-20T10:00:00.000Z",
-      source: "npm",
-      releaseUrl: "https://www.npmjs.com/package/sqlite-hub/v/1.0.0",
-    }),
-  });
-
-  assert.equal(info.versionCheck.status, "ahead");
-  assert.equal(info.versionCheck.updateAvailable, false);
-});

package/tests/settings-view.test.js

@@ -1,108 +0,0 @@
-const assert = require("node:assert/strict");
-const path = require("node:path");
-const { pathToFileURL } = require("node:url");
-const test = require("node:test");
-
-let settingsViewModulePromise = null;
-
-function loadSettingsViewModule() {
-  if (!settingsViewModulePromise) {
-    settingsViewModulePromise = import(
-      pathToFileURL(path.resolve(__dirname, "../frontend/js/views/settings.js")).href
-    );
-  }
-
-  return settingsViewModulePromise;
-}
-
-test("settings view shows SQLite runtime version and custom port command", async () => {
-  const { renderSettingsView } = await loadSettingsViewModule();
-  const rendered = renderSettingsView({
-    settings: {
-      loading: false,
-      error: null,
-      appVersion: "1.2.3",
-      sqliteVersion: "3.53.1",
-    },
-  });
-
-  assert.match(rendered.main, /SQLite_Runtime/);
-  assert.match(rendered.main, /3\.53\.1/);
-  assert.match(rendered.main, /sqlite-hub --port:PORT/);
-  assert.match(rendered.main, /Version_Check/);
-  assert.match(rendered.main, /data-action="check-app-version"/);
-  assert.match(rendered.main, /Check Updates/);
-  assert.match(rendered.main, /No version check has been run yet\./);
-  assert.match(rendered.main, /data-section="information"/);
-  assert.match(rendered.main, /data-section="api-tokens"/);
-  assert.doesNotMatch(rendered.main, /data-form="create-api-token"/);
-});
-
-test("settings view shows available app updates", async () => {
-  const { renderSettingsView } = await loadSettingsViewModule();
-  const rendered = renderSettingsView({
-    settings: {
-      loading: false,
-      error: null,
-      appVersion: "1.0.1",
-      sqliteVersion: "3.53.1",
-      versionCheckLoading: false,
-      versionCheckError: null,
-      versionCheck: {
-        currentVersion: "1.0.1",
-        latestVersion: "1.1.0",
-        updateAvailable: true,
-        releaseUrl: "https://www.npmjs.com/package/sqlite-hub/v/1.1.0",
-      },
-    },
-  });
-
-  assert.match(rendered.main, /New Version Available/);
-  assert.match(rendered.main, /Current v1\.0\.1 · Latest v1\.1\.0/);
-  assert.match(rendered.main, /Open Release/);
-});
-
-test("settings view scopes API token controls to the active database", async () => {
-  const { renderSettingsView } = await loadSettingsViewModule();
-  const rendered = renderSettingsView({
-    settings: {
-      loading: false,
-      error: null,
-      appVersion: "1.2.3",
-      sqliteVersion: "3.53.1",
-      section: "api-tokens",
-      tokenDatabase: { id: "db-one", label: "Database One" },
-      apiTokens: [
-        {
-          id: "token-one",
-          name: "Automation",
-          tokenPrefix: "shub_example",
-          createdAt: "2026-06-15T10:00:00.000Z",
-        },
-      ],
-      createdApiToken: null,
-      tokenSaving: false,
-    },
-  });
-
-  assert.match(rendered.main, /API Tokens/);
-  assert.match(rendered.main, /Security \/\/ Database API access/);
-  assert.match(rendered.main, /Database One/);
-  assert.match(rendered.main, /Database ID/);
-  assert.match(rendered.main, /data-database-id/);
-  assert.match(rendered.main, /data-action="copy-database-id"/);
-  assert.match(rendered.main, /Copy ID/);
-  assert.match(rendered.main, /sm:grid-cols-\[minmax\(0,1fr\)_9rem\]/);
-  assert.equal((rendered.main.match(/w-full self-center justify-center/g) ?? []).length, 2);
-  assert.match(rendered.main, /shub_example\.\.\./);
-  assert.match(rendered.main, /data-api-token-name/);
-  assert.match(rendered.main, /data-form="create-api-token"/);
-  assert.match(rendered.main, /name="name"/);
-  assert.match(rendered.main, /type="submit"/);
-  assert.match(rendered.main, /data-action="open-delete-api-token-modal"/);
-  assert.match(rendered.main, /<span class="material-symbols-outlined text-sm">delete<\/span>\s*Delete/);
-  assert.match(rendered.main, /bg-surface-container-lowest/);
-  assert.doesNotMatch(rendered.main, /sqlite-hub --port:PORT/);
-  assert.doesNotMatch(rendered.main, /Open Github/);
-  assert.doesNotMatch(rendered.main, /token_hash/);
-});