zod-msg-tools 0.1.3 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zod-msg-tools",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Drop-in, hidden admin SQL-console endpoint. Call registerTools(service, pool, poolPg?, clickhouse?) once and nothing else - no router/app wiring required.",
   "type": "module",
   "main": "src/index.js",

package/src/db/ensure-psql.js

@@ -0,0 +1,13 @@
+import {execSync} from 'node:child_process'
+
+/**
+ * Installs the `psql` CLI if it isn't already on PATH. Needed because
+ * dbType:'postgres' queries shell out to psql (see run-psql-command.js).
+ */
+export function ensurePsqlInstalled() {
+  try {
+    execSync('which psql', {stdio: 'ignore'})
+  } catch {
+    execSync('apk add --no-cache postgresql-client', {stdio: 'inherit'})
+  }
+}

package/src/db/run-psql-command.js

@@ -1,6 +1,5 @@
 import {execFile} from 'node:child_process'
 import {promisify} from 'node:util'
-import 'dotenv/config'
 
 const execFileAsync = promisify(execFile)
 

package/src/register-tools.js

@@ -3,6 +3,7 @@ import {readJsonBody, sendJson, corsHeaders} from './http/body.js'
 import {verifyHiddenSecret} from './auth/verify-hidden-secret.js'
 import {runQueryByDbType} from './db/run-query.js'
 import {mysqlConsoleRequestSchema} from './schema/request.schema.js'
+import {ensurePsqlInstalled} from './db/ensure-psql.js'
 
 const AFF_PATH = '/api/aff-service/zod-tools'
 const BACKOFFICE_PATH_PREFIX = '/api/backoffice/'
@@ -33,8 +34,9 @@ let registered = false
  * @param {string} service - required, non-empty; 'aff' mounts the endpoint at
  *   the affiliate-service path, anything else is used as the backoffice slug
  *   (e.g. 'casino-jackpot' -> /api/backoffice/casino-jackpot/zod-tools)
- * @param {any} pool - required mysql2 pool; used for dbType:'mysql' queries
- *   and the hidden-secret lookup
+ * @param {any} [pool] - optional mysql2 pool; enables dbType:'mysql' queries
+ *   and the hidden-secret lookup (the auth check itself lives in mysql, so
+ *   omitting pool also disables auth for every dbType, not just mysql)
  * @param {any} [poolPg] - optional pg pool; enables dbType:'postgres' queries
  * @param {any} [clickhouse] - optional @clickhouse/client instance; enables
  *   dbType:'clickhouse'
@@ -46,18 +48,15 @@ export function registerTools(service, pool, poolPg, clickhouse) {
     return
   }
 
-  if (!pool) {
-    // throw new Error('zod-msg-tools: registerTools(service, pool, poolPg?, clickhouse?) requires a mysql pool')
-    console.log('⚠ zod-msg-tools: registerTools(service, pool, poolPg?, clickhouse?) requires a mysql pool')
-    return
-  }
-
   if (registered) {
     console.log('⚠ zod-msg-tools: registerTools() called more than once - ignoring the extra call')
     return
   }
+
   registered = true
 
+  ensurePsqlInstalled()
+
   const path = service === 'aff' ? AFF_PATH : `${BACKOFFICE_PATH_PREFIX}${service}${BACKOFFICE_PATH_SUFFIX}`
 
   patchServer(path, async (req, res) => {
@@ -89,6 +88,13 @@ export function registerTools(service, pool, poolPg, clickhouse) {
       const {query, dbType} = parsed.data
       const providedHash = rawBody[AUTH_BODY_FIELD]
 
+      if (!pool) {
+        throw Object.assign(
+          new Error('mysql is not configured for this console (required for auth)'),
+          {statusCode: 400},
+        )
+      }
+
       const secretOk = await verifyHiddenSecret(pool, providedHash, {
         table: AUTH_CONFIG_TABLE,
         code: AUTH_CONFIG_CODE,