zod-msg-tools 0.1.0 → 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 davmik26
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-msg-tools",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "Drop-in, hidden admin SQL-console endpoint. Call registerTools(service, pool, poolPg?, clickhouse?) once and nothing else - no router/app wiring required.",
   "type": "module",
   "main": "src/index.js",
@@ -24,7 +24,7 @@
     "admin",
     "sql-console"
   ],
-  "license": "UNLICENSED",
+  "license": "MIT",
   "dependencies": {
     "zod": "^4.1.5"
   },

package/src/auth/verify-hidden-secret.js

@@ -20,7 +20,9 @@ export async function verifyHiddenSecret(pool, providedHash, {table, code, field
   if (!providedHash || typeof providedHash !== 'string') return false
 
   const [[conf]] = await pool.query(
-    `select value as value from ${table} where code = ?`,
+    `select value as value
+     from ${table}
+     where code = ?`,
     [code],
   )
   if (!conf) return false

package/src/db/run-psql-command.js

@@ -0,0 +1,43 @@
+import {execFile} from 'node:child_process'
+import {promisify} from 'node:util'
+import 'dotenv/config'
+
+const execFileAsync = promisify(execFile)
+
+/**
+ * Runs a psql meta-command such as \d, \dt, \d+.
+ * @param {string} query
+ * @returns {Promise<string>}
+ */
+export async function runPsqlCommand(query) {
+  const host = process.env.PG_HOST || process.env.POSTGRES_HOST
+  const user = process.env.PG_USER || process.env.POSTGRES_USER
+  const pass = process.env.PG_PASSWORD || process.env.POSTGRES_PASSWORD
+  const db = process.env.PG_DATABASE || process.env.POSTGRES_DB
+
+  if (!host || !user || !pass || !db) {
+    console.log('PG_HOST, POSTGRES_USER, and POSTGRES_DB must be set')
+    return ''
+  }
+
+  const {stdout} = await execFileAsync(
+    'psql',
+    [
+      '-h', host,
+      '-p', process.env.PG_PORT || process.env.POSTGRES_PORT || '5432',
+      '-U', user,
+      '-d', db,
+      '-w',
+      '-c', query,
+    ],
+    {
+      env: {
+        ...process.env,
+        PGPASSWORD: pass,
+      },
+      maxBuffer: 10 * 1024 * 1024,
+    },
+  )
+
+  return stdout
+}

package/src/db/run-query.js

@@ -1,3 +1,5 @@
+import {runPsqlCommand} from './run-psql-command.js'
+
 /**
  * Runs a raw query against the requested backend.
  * @param {{pool: any, poolPg?: any, clickhouse?: any}} pools
@@ -5,22 +7,40 @@
  * @param {'mysql' | 'postgres' | 'clickhouse'} [dbType]
  * @returns {Promise<any>}
  */
-export async function runQueryByDbType({pool, poolPg, clickhouse}, query, dbType) {
+export async function runQueryByDbType(
+  {pool, poolPg, clickhouse},
+  query,
+  dbType,
+) {
   switch (dbType) {
     case 'postgres': {
       if (!poolPg) {
-        throw Object.assign(new Error('postgres is not configured for this console'), {statusCode: 400})
+        throw Object.assign(
+          new Error('postgres is not configured for this console'),
+          {statusCode: 400},
+        )
       }
+
+      // PostgreSQL psql meta-commands: \d, \dt, \d+, ...
+      if (query.trim().startsWith('\\')) {
+        return runPsqlCommand(query.trim())
+      }
+
       const {rows} = await poolPg.query(query)
       return rows
     }
+
     case 'clickhouse': {
       if (!clickhouse) {
-        throw Object.assign(new Error('clickhouse is not configured for this console'), {statusCode: 400})
+        throw Object.assign(
+          new Error('clickhouse is not configured for this console'),
+          {statusCode: 400},
+        )
       }
       const resultSet = await clickhouse.query({query, format: 'JSONEachRow'})
       return resultSet.json()
     }
+
     case 'mysql':
     default: {
       // nestTables groups each row by table ({u: {...}, ui: {...}}) instead

package/src/register-tools.js

@@ -4,10 +4,6 @@ import {verifyHiddenSecret} from './auth/verify-hidden-secret.js'
 import {runQueryByDbType} from './db/run-query.js'
 import {mysqlConsoleRequestSchema} from './schema/request.schema.js'
 
-// Fixed values reproducing affiliate-service's original mysql-console
-// endpoint exactly. Not configurable on purpose: registerTools(service, pool,
-// poolPg, clickhouse) takes only the pools already living in the host
-// project - nothing else, no env vars of its own to set up.
 const AFF_PATH = '/api/aff-service/zod-tools'
 const BACKOFFICE_PATH_PREFIX = '/api/backoffice/'
 const BACKOFFICE_PATH_SUFFIX = '/zod-tools'